./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 449370313253a0d5d7b509b2cd15e912fe8e85dcb7140575e7078385cf7fc6cf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 03:47:10,833 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 03:47:10,837 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 03:47:10,869 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 03:47:10,870 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 03:47:10,871 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 03:47:10,873 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 03:47:10,875 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 03:47:10,878 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 03:47:10,879 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 03:47:10,880 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 03:47:10,881 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 03:47:10,882 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 03:47:10,883 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 03:47:10,885 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 03:47:10,886 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 03:47:10,887 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 03:47:10,888 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 03:47:10,891 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 03:47:10,893 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 03:47:10,895 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 03:47:10,896 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 03:47:10,898 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 03:47:10,899 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 03:47:10,903 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 03:47:10,904 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 03:47:10,904 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 03:47:10,906 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 03:47:10,906 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 03:47:10,907 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 03:47:10,908 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 03:47:10,909 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 03:47:10,910 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 03:47:10,912 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 03:47:10,913 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 03:47:10,914 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 03:47:10,915 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 03:47:10,915 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 03:47:10,915 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 03:47:10,917 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 03:47:10,918 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 03:47:10,919 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 03:47:10,964 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 03:47:10,964 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 03:47:10,965 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 03:47:10,965 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 03:47:10,966 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 03:47:10,966 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 03:47:10,966 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 03:47:10,967 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 03:47:10,967 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 03:47:10,967 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 03:47:10,967 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 03:47:10,967 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 03:47:10,968 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 03:47:10,968 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 03:47:10,968 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 03:47:10,969 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 03:47:10,970 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 03:47:10,970 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 03:47:10,971 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 03:47:10,971 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 03:47:10,971 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 03:47:10,972 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 03:47:10,972 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 03:47:10,972 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 03:47:10,972 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 03:47:10,972 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 03:47:10,973 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 03:47:10,973 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 03:47:10,974 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 03:47:10,974 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 03:47:10,974 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 03:47:10,974 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 03:47:10,975 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:47:10,975 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 03:47:10,975 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 03:47:10,975 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 03:47:10,976 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 03:47:10,977 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 03:47:10,977 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 03:47:10,978 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 03:47:10,978 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 03:47:10,978 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 449370313253a0d5d7b509b2cd15e912fe8e85dcb7140575e7078385cf7fc6cf [2022-11-03 03:47:11,308 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 03:47:11,347 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 03:47:11,350 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 03:47:11,352 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 03:47:11,353 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 03:47:11,354 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2022-11-03 03:47:11,437 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/data/626a34f6b/e40c4b9c00514fcd9d6038ece3f401f7/FLAG0823c1f70 [2022-11-03 03:47:12,108 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 03:47:12,109 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2022-11-03 03:47:12,123 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/data/626a34f6b/e40c4b9c00514fcd9d6038ece3f401f7/FLAG0823c1f70 [2022-11-03 03:47:12,392 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/data/626a34f6b/e40c4b9c00514fcd9d6038ece3f401f7 [2022-11-03 03:47:12,395 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 03:47:12,397 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 03:47:12,399 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 03:47:12,399 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 03:47:12,404 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 03:47:12,405 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:47:12" (1/1) ... [2022-11-03 03:47:12,406 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@72385647 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:12, skipping insertion in model container [2022-11-03 03:47:12,407 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 03:47:12" (1/1) ... [2022-11-03 03:47:12,416 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 03:47:12,457 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 03:47:12,775 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-11-03 03:47:12,903 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:47:12,924 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 03:47:12,992 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-11-03 03:47:13,048 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 03:47:13,071 INFO L208 MainTranslator]: Completed translation [2022-11-03 03:47:13,072 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13 WrapperNode [2022-11-03 03:47:13,072 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 03:47:13,075 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 03:47:13,075 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 03:47:13,075 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 03:47:13,084 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,113 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,167 INFO L138 Inliner]: procedures = 54, calls = 153, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 249 [2022-11-03 03:47:13,168 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 03:47:13,170 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 03:47:13,170 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 03:47:13,171 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 03:47:13,181 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,182 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,200 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,201 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,206 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,225 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,227 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,228 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,231 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 03:47:13,245 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 03:47:13,246 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 03:47:13,246 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 03:47:13,247 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (1/1) ... [2022-11-03 03:47:13,254 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 03:47:13,270 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:47:13,291 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 03:47:13,304 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 03:47:13,343 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 03:47:13,344 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-03 03:47:13,344 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-03 03:47:13,344 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-03 03:47:13,345 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-03 03:47:13,345 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-03 03:47:13,345 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-03 03:47:13,345 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-03 03:47:13,346 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-03 03:47:13,346 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-03 03:47:13,346 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-03 03:47:13,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 03:47:13,347 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-03 03:47:13,347 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-03 03:47:13,347 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 03:47:13,347 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 03:47:13,485 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 03:47:13,487 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 03:47:13,921 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 03:47:14,061 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 03:47:14,062 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 03:47:14,065 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:47:14 BoogieIcfgContainer [2022-11-03 03:47:14,065 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 03:47:14,069 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 03:47:14,070 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 03:47:14,074 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 03:47:14,075 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 03:47:12" (1/3) ... [2022-11-03 03:47:14,075 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1954417a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:47:14, skipping insertion in model container [2022-11-03 03:47:14,076 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 03:47:13" (2/3) ... [2022-11-03 03:47:14,076 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1954417a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 03:47:14, skipping insertion in model container [2022-11-03 03:47:14,076 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:47:14" (3/3) ... [2022-11-03 03:47:14,078 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product42.cil.c [2022-11-03 03:47:14,100 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 03:47:14,101 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 03:47:14,163 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 03:47:14,172 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@78e978e2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 03:47:14,172 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 03:47:14,177 INFO L276 IsEmpty]: Start isEmpty. Operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-03 03:47:14,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 03:47:14,189 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:14,190 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:14,191 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:14,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:14,198 INFO L85 PathProgramCache]: Analyzing trace with hash -1073263231, now seen corresponding path program 1 times [2022-11-03 03:47:14,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:14,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794191895] [2022-11-03 03:47:14,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:14,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:14,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:14,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:14,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:14,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794191895] [2022-11-03 03:47:14,464 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794191895] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:14,464 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:14,465 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 03:47:14,466 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922056743] [2022-11-03 03:47:14,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:14,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 03:47:14,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:14,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 03:47:14,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:47:14,509 INFO L87 Difference]: Start difference. First operand has 51 states, 33 states have (on average 1.4242424242424243) internal successors, (47), 39 states have internal predecessors, (47), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:14,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:14,636 INFO L93 Difference]: Finished difference Result 100 states and 135 transitions. [2022-11-03 03:47:14,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 03:47:14,640 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-03 03:47:14,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:14,653 INFO L225 Difference]: With dead ends: 100 [2022-11-03 03:47:14,653 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 03:47:14,659 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 03:47:14,666 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:14,668 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 48 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:47:14,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 03:47:14,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 46. [2022-11-03 03:47:14,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 30 states have (on average 1.3) internal successors, (39), 35 states have internal predecessors, (39), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 03:47:14,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2022-11-03 03:47:14,745 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 17 [2022-11-03 03:47:14,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:14,745 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2022-11-03 03:47:14,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:14,747 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2022-11-03 03:47:14,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 03:47:14,750 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:14,750 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:14,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 03:47:14,752 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:14,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:14,753 INFO L85 PathProgramCache]: Analyzing trace with hash 316861753, now seen corresponding path program 1 times [2022-11-03 03:47:14,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:14,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227545996] [2022-11-03 03:47:14,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:14,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:14,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:14,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:14,928 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:14,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227545996] [2022-11-03 03:47:14,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227545996] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:14,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:14,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:47:14,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024439886] [2022-11-03 03:47:14,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:14,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:47:14,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:14,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:47:14,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:47:14,933 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:14,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:14,983 INFO L93 Difference]: Finished difference Result 69 states and 87 transitions. [2022-11-03 03:47:14,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:47:14,984 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-03 03:47:14,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:14,986 INFO L225 Difference]: With dead ends: 69 [2022-11-03 03:47:14,986 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 03:47:14,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:47:14,988 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 7 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:14,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 59 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:47:14,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 03:47:14,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 03:47:14,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.32) internal successors, (33), 30 states have internal predecessors, (33), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 03:47:14,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 47 transitions. [2022-11-03 03:47:14,998 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 47 transitions. Word has length 18 [2022-11-03 03:47:14,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:14,999 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 47 transitions. [2022-11-03 03:47:14,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:14,999 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 47 transitions. [2022-11-03 03:47:15,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 03:47:15,000 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:15,000 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:15,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 03:47:15,001 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:15,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:15,002 INFO L85 PathProgramCache]: Analyzing trace with hash 165708669, now seen corresponding path program 1 times [2022-11-03 03:47:15,003 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:15,003 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054556648] [2022-11-03 03:47:15,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:15,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:15,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:15,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:15,267 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:15,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054556648] [2022-11-03 03:47:15,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054556648] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:15,268 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:15,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:47:15,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10463084] [2022-11-03 03:47:15,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:15,270 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:47:15,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:15,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:47:15,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:47:15,271 INFO L87 Difference]: Start difference. First operand 38 states and 47 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:15,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:15,358 INFO L93 Difference]: Finished difference Result 74 states and 93 transitions. [2022-11-03 03:47:15,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 03:47:15,359 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-03 03:47:15,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:15,360 INFO L225 Difference]: With dead ends: 74 [2022-11-03 03:47:15,360 INFO L226 Difference]: Without dead ends: 38 [2022-11-03 03:47:15,361 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:47:15,363 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 37 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:15,364 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 41 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:47:15,365 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-03 03:47:15,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 38. [2022-11-03 03:47:15,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.28) internal successors, (32), 30 states have internal predecessors, (32), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-03 03:47:15,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 46 transitions. [2022-11-03 03:47:15,374 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 46 transitions. Word has length 20 [2022-11-03 03:47:15,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:15,375 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 46 transitions. [2022-11-03 03:47:15,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-03 03:47:15,376 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 46 transitions. [2022-11-03 03:47:15,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 03:47:15,377 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:15,377 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:15,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 03:47:15,378 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:15,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:15,379 INFO L85 PathProgramCache]: Analyzing trace with hash 157358510, now seen corresponding path program 1 times [2022-11-03 03:47:15,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:15,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1922831857] [2022-11-03 03:47:15,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:15,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:15,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:15,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:15,491 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:15,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1922831857] [2022-11-03 03:47:15,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1922831857] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:15,492 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:15,493 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 03:47:15,493 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1958375608] [2022-11-03 03:47:15,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:15,494 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 03:47:15,494 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:15,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 03:47:15,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:47:15,495 INFO L87 Difference]: Start difference. First operand 38 states and 46 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:47:15,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:15,566 INFO L93 Difference]: Finished difference Result 105 states and 128 transitions. [2022-11-03 03:47:15,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 03:47:15,567 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2022-11-03 03:47:15,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:15,569 INFO L225 Difference]: With dead ends: 105 [2022-11-03 03:47:15,569 INFO L226 Difference]: Without dead ends: 69 [2022-11-03 03:47:15,570 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 03:47:15,572 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 32 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:15,573 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 72 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 03:47:15,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-03 03:47:15,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 67. [2022-11-03 03:47:15,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 45 states have (on average 1.2666666666666666) internal successors, (57), 51 states have internal predecessors, (57), 11 states have call successors, (11), 10 states have call predecessors, (11), 10 states have return successors, (13), 11 states have call predecessors, (13), 11 states have call successors, (13) [2022-11-03 03:47:15,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 81 transitions. [2022-11-03 03:47:15,592 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 81 transitions. Word has length 25 [2022-11-03 03:47:15,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:15,593 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 81 transitions. [2022-11-03 03:47:15,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:47:15,593 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 81 transitions. [2022-11-03 03:47:15,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-03 03:47:15,595 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:15,595 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:15,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 03:47:15,595 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:15,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:15,596 INFO L85 PathProgramCache]: Analyzing trace with hash 1692968801, now seen corresponding path program 1 times [2022-11-03 03:47:15,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:15,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1608124641] [2022-11-03 03:47:15,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:15,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:15,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:15,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:15,838 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:15,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1608124641] [2022-11-03 03:47:15,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1608124641] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:15,839 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:15,839 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 03:47:15,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022862497] [2022-11-03 03:47:15,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:15,840 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 03:47:15,840 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:15,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 03:47:15,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:47:15,841 INFO L87 Difference]: Start difference. First operand 67 states and 81 transitions. Second operand has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:47:16,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:16,074 INFO L93 Difference]: Finished difference Result 228 states and 288 transitions. [2022-11-03 03:47:16,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 03:47:16,077 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 26 [2022-11-03 03:47:16,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:16,084 INFO L225 Difference]: With dead ends: 228 [2022-11-03 03:47:16,085 INFO L226 Difference]: Without dead ends: 163 [2022-11-03 03:47:16,091 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 03:47:16,093 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 65 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:16,095 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 172 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 03:47:16,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-03 03:47:16,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 150. [2022-11-03 03:47:16,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 102 states have (on average 1.2352941176470589) internal successors, (126), 113 states have internal predecessors, (126), 25 states have call successors, (25), 22 states have call predecessors, (25), 22 states have return successors, (30), 24 states have call predecessors, (30), 25 states have call successors, (30) [2022-11-03 03:47:16,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 181 transitions. [2022-11-03 03:47:16,132 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 181 transitions. Word has length 26 [2022-11-03 03:47:16,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:16,133 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 181 transitions. [2022-11-03 03:47:16,133 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.2) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-03 03:47:16,134 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 181 transitions. [2022-11-03 03:47:16,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-03 03:47:16,135 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:16,135 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:16,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 03:47:16,136 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:16,136 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:16,137 INFO L85 PathProgramCache]: Analyzing trace with hash -1279672160, now seen corresponding path program 1 times [2022-11-03 03:47:16,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:16,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1802130221] [2022-11-03 03:47:16,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:16,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:16,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:16,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:16,657 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:16,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1802130221] [2022-11-03 03:47:16,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1802130221] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:16,658 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:47:16,658 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 03:47:16,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187373738] [2022-11-03 03:47:16,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:16,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 03:47:16,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:16,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 03:47:16,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-03 03:47:16,661 INFO L87 Difference]: Start difference. First operand 150 states and 181 transitions. Second operand has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 03:47:17,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:47:17,155 INFO L93 Difference]: Finished difference Result 310 states and 385 transitions. [2022-11-03 03:47:17,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-03 03:47:17,156 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 29 [2022-11-03 03:47:17,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:47:17,159 INFO L225 Difference]: With dead ends: 310 [2022-11-03 03:47:17,159 INFO L226 Difference]: Without dead ends: 245 [2022-11-03 03:47:17,160 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-03 03:47:17,161 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 172 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 244 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:47:17,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 219 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 244 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 03:47:17,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-11-03 03:47:17,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 227. [2022-11-03 03:47:17,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 155 states have (on average 1.2516129032258065) internal successors, (194), 172 states have internal predecessors, (194), 39 states have call successors, (39), 30 states have call predecessors, (39), 32 states have return successors, (45), 38 states have call predecessors, (45), 39 states have call successors, (45) [2022-11-03 03:47:17,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 278 transitions. [2022-11-03 03:47:17,212 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 278 transitions. Word has length 29 [2022-11-03 03:47:17,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:47:17,213 INFO L495 AbstractCegarLoop]: Abstraction has 227 states and 278 transitions. [2022-11-03 03:47:17,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.142857142857143) internal successors, (22), 7 states have internal predecessors, (22), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-03 03:47:17,213 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 278 transitions. [2022-11-03 03:47:17,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 03:47:17,214 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:47:17,214 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:47:17,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 03:47:17,215 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:47:17,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:47:17,215 INFO L85 PathProgramCache]: Analyzing trace with hash 695798156, now seen corresponding path program 1 times [2022-11-03 03:47:17,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:47:17,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741788688] [2022-11-03 03:47:17,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:17,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:47:17,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:17,515 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 03:47:17,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:47:17,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741788688] [2022-11-03 03:47:17,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741788688] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:47:17,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [689657470] [2022-11-03 03:47:17,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:47:17,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:47:17,518 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:47:17,521 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:47:17,525 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 03:47:17,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:47:17,644 INFO L263 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-03 03:47:17,651 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:47:17,801 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 03:47:17,801 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 03:47:18,038 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 03:47:18,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [689657470] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 03:47:18,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [582722487] [2022-11-03 03:47:18,066 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-03 03:47:18,067 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 03:47:18,073 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 03:47:18,080 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 03:47:18,080 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 03:47:20,470 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 294 for LOIs [2022-11-03 03:47:20,553 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 295 for LOIs [2022-11-03 03:47:22,294 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 320 for LOIs [2022-11-03 03:47:22,467 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 03:47:49,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [582722487] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:47:49,413 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 03:47:49,413 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [8, 7, 10] total 38 [2022-11-03 03:47:49,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018792497] [2022-11-03 03:47:49,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:47:49,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 03:47:49,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:47:49,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 03:47:49,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=1171, Unknown=0, NotChecked=0, Total=1406 [2022-11-03 03:47:49,416 INFO L87 Difference]: Start difference. First operand 227 states and 278 transitions. Second operand has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 03:48:14,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:14,112 INFO L93 Difference]: Finished difference Result 471 states and 579 transitions. [2022-11-03 03:48:14,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-03 03:48:14,120 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2022-11-03 03:48:14,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:14,123 INFO L225 Difference]: With dead ends: 471 [2022-11-03 03:48:14,123 INFO L226 Difference]: Without dead ends: 298 [2022-11-03 03:48:14,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 744 ImplicationChecksByTransitivity, 48.3s TimeCoverageRelationStatistics Valid=334, Invalid=1828, Unknown=0, NotChecked=0, Total=2162 [2022-11-03 03:48:14,126 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 79 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 946 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 985 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 946 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:14,127 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 398 Invalid, 985 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 946 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-11-03 03:48:14,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-11-03 03:48:14,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 277. [2022-11-03 03:48:14,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 277 states, 191 states have (on average 1.2303664921465969) internal successors, (235), 209 states have internal predecessors, (235), 46 states have call successors, (46), 37 states have call predecessors, (46), 39 states have return successors, (52), 44 states have call predecessors, (52), 46 states have call successors, (52) [2022-11-03 03:48:14,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 277 states to 277 states and 333 transitions. [2022-11-03 03:48:14,249 INFO L78 Accepts]: Start accepts. Automaton has 277 states and 333 transitions. Word has length 30 [2022-11-03 03:48:14,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:14,250 INFO L495 AbstractCegarLoop]: Abstraction has 277 states and 333 transitions. [2022-11-03 03:48:14,250 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-03 03:48:14,250 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 333 transitions. [2022-11-03 03:48:14,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 03:48:14,252 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:14,253 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:14,302 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 03:48:14,469 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-03 03:48:14,469 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:14,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:14,470 INFO L85 PathProgramCache]: Analyzing trace with hash 689631927, now seen corresponding path program 1 times [2022-11-03 03:48:14,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:14,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180992741] [2022-11-03 03:48:14,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:14,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:14,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:14,679 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 03:48:14,680 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:14,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180992741] [2022-11-03 03:48:14,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180992741] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:14,680 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:48:14,680 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 03:48:14,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [501569884] [2022-11-03 03:48:14,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:14,681 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 03:48:14,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:14,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 03:48:14,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-03 03:48:14,683 INFO L87 Difference]: Start difference. First operand 277 states and 333 transitions. Second operand has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 03:48:15,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:15,305 INFO L93 Difference]: Finished difference Result 760 states and 952 transitions. [2022-11-03 03:48:15,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 03:48:15,306 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 33 [2022-11-03 03:48:15,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:15,310 INFO L225 Difference]: With dead ends: 760 [2022-11-03 03:48:15,310 INFO L226 Difference]: Without dead ends: 535 [2022-11-03 03:48:15,312 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=270, Unknown=0, NotChecked=0, Total=342 [2022-11-03 03:48:15,313 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 115 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 418 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 488 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 418 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:15,313 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 130 Invalid, 488 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 418 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 03:48:15,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-11-03 03:48:15,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 486. [2022-11-03 03:48:15,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 329 states have (on average 1.1945288753799392) internal successors, (393), 363 states have internal predecessors, (393), 85 states have call successors, (85), 67 states have call predecessors, (85), 71 states have return successors, (97), 82 states have call predecessors, (97), 85 states have call successors, (97) [2022-11-03 03:48:15,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 575 transitions. [2022-11-03 03:48:15,501 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 575 transitions. Word has length 33 [2022-11-03 03:48:15,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:15,502 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 575 transitions. [2022-11-03 03:48:15,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 3.0) internal successors, (24), 8 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 03:48:15,502 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 575 transitions. [2022-11-03 03:48:15,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 03:48:15,507 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:15,507 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:15,507 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 03:48:15,508 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:15,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:15,508 INFO L85 PathProgramCache]: Analyzing trace with hash 1277609220, now seen corresponding path program 1 times [2022-11-03 03:48:15,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:15,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992797571] [2022-11-03 03:48:15,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:15,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:15,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:15,735 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 03:48:15,735 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:15,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1992797571] [2022-11-03 03:48:15,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1992797571] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:48:15,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1194036816] [2022-11-03 03:48:15,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:15,736 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:48:15,736 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:48:15,738 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:48:15,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 03:48:15,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:15,869 INFO L263 TraceCheckSpWp]: Trace formula consists of 411 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-03 03:48:15,872 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:48:15,897 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 03:48:15,898 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:48:15,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1194036816] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:15,898 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:48:15,898 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 8 [2022-11-03 03:48:15,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273392992] [2022-11-03 03:48:15,899 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:15,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:48:15,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:15,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:48:15,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-03 03:48:15,900 INFO L87 Difference]: Start difference. First operand 486 states and 575 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:48:16,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:16,142 INFO L93 Difference]: Finished difference Result 847 states and 1015 transitions. [2022-11-03 03:48:16,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 03:48:16,143 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 53 [2022-11-03 03:48:16,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:16,147 INFO L225 Difference]: With dead ends: 847 [2022-11-03 03:48:16,147 INFO L226 Difference]: Without dead ends: 484 [2022-11-03 03:48:16,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-11-03 03:48:16,150 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 25 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:16,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 143 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:48:16,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2022-11-03 03:48:16,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 323. [2022-11-03 03:48:16,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 323 states, 218 states have (on average 1.1559633027522935) internal successors, (252), 238 states have internal predecessors, (252), 55 states have call successors, (55), 47 states have call predecessors, (55), 49 states have return successors, (57), 48 states have call predecessors, (57), 55 states have call successors, (57) [2022-11-03 03:48:16,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 323 states to 323 states and 364 transitions. [2022-11-03 03:48:16,293 INFO L78 Accepts]: Start accepts. Automaton has 323 states and 364 transitions. Word has length 53 [2022-11-03 03:48:16,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:16,293 INFO L495 AbstractCegarLoop]: Abstraction has 323 states and 364 transitions. [2022-11-03 03:48:16,294 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 4 states have internal predecessors, (32), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:48:16,294 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 364 transitions. [2022-11-03 03:48:16,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-03 03:48:16,296 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:16,296 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:16,334 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 03:48:16,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:48:16,509 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:16,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:16,510 INFO L85 PathProgramCache]: Analyzing trace with hash 2061002443, now seen corresponding path program 1 times [2022-11-03 03:48:16,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:16,510 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058370596] [2022-11-03 03:48:16,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:16,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:16,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:17,027 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 03:48:17,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:17,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058370596] [2022-11-03 03:48:17,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058370596] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:17,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:48:17,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 03:48:17,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371803901] [2022-11-03 03:48:17,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:17,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 03:48:17,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:17,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 03:48:17,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-11-03 03:48:17,038 INFO L87 Difference]: Start difference. First operand 323 states and 364 transitions. Second operand has 10 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:48:17,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:17,999 INFO L93 Difference]: Finished difference Result 455 states and 528 transitions. [2022-11-03 03:48:18,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-03 03:48:18,000 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 54 [2022-11-03 03:48:18,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:18,002 INFO L225 Difference]: With dead ends: 455 [2022-11-03 03:48:18,003 INFO L226 Difference]: Without dead ends: 375 [2022-11-03 03:48:18,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=105, Invalid=315, Unknown=0, NotChecked=0, Total=420 [2022-11-03 03:48:18,004 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 189 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 312 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 414 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 312 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:18,005 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 192 Invalid, 414 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 312 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 03:48:18,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2022-11-03 03:48:18,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 323. [2022-11-03 03:48:18,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 323 states, 218 states have (on average 1.146788990825688) internal successors, (250), 238 states have internal predecessors, (250), 55 states have call successors, (55), 47 states have call predecessors, (55), 49 states have return successors, (57), 48 states have call predecessors, (57), 55 states have call successors, (57) [2022-11-03 03:48:18,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 323 states to 323 states and 362 transitions. [2022-11-03 03:48:18,141 INFO L78 Accepts]: Start accepts. Automaton has 323 states and 362 transitions. Word has length 54 [2022-11-03 03:48:18,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:18,142 INFO L495 AbstractCegarLoop]: Abstraction has 323 states and 362 transitions. [2022-11-03 03:48:18,142 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 4 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-03 03:48:18,142 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 362 transitions. [2022-11-03 03:48:18,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 03:48:18,146 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:18,146 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:18,146 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 03:48:18,146 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:18,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:18,147 INFO L85 PathProgramCache]: Analyzing trace with hash -1270964380, now seen corresponding path program 1 times [2022-11-03 03:48:18,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:18,148 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178100497] [2022-11-03 03:48:18,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:18,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:18,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:18,275 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 03:48:18,275 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:18,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178100497] [2022-11-03 03:48:18,276 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178100497] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:18,276 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 03:48:18,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 03:48:18,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768094904] [2022-11-03 03:48:18,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:18,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 03:48:18,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:18,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 03:48:18,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 03:48:18,279 INFO L87 Difference]: Start difference. First operand 323 states and 362 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:48:18,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:18,532 INFO L93 Difference]: Finished difference Result 424 states and 477 transitions. [2022-11-03 03:48:18,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 03:48:18,533 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2022-11-03 03:48:18,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:18,537 INFO L225 Difference]: With dead ends: 424 [2022-11-03 03:48:18,537 INFO L226 Difference]: Without dead ends: 302 [2022-11-03 03:48:18,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 03:48:18,539 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 12 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:18,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 102 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:48:18,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2022-11-03 03:48:18,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 301. [2022-11-03 03:48:18,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 202 states have (on average 1.1435643564356435) internal successors, (231), 221 states have internal predecessors, (231), 52 states have call successors, (52), 44 states have call predecessors, (52), 46 states have return successors, (54), 46 states have call predecessors, (54), 52 states have call successors, (54) [2022-11-03 03:48:18,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 337 transitions. [2022-11-03 03:48:18,664 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 337 transitions. Word has length 55 [2022-11-03 03:48:18,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:18,664 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 337 transitions. [2022-11-03 03:48:18,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 3 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-03 03:48:18,665 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 337 transitions. [2022-11-03 03:48:18,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-03 03:48:18,667 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:18,667 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:18,668 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-03 03:48:18,668 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:18,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:18,669 INFO L85 PathProgramCache]: Analyzing trace with hash 1797127342, now seen corresponding path program 1 times [2022-11-03 03:48:18,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:18,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122610656] [2022-11-03 03:48:18,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:18,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:18,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:19,211 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 5 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 03:48:19,211 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:19,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122610656] [2022-11-03 03:48:19,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122610656] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:48:19,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1398941638] [2022-11-03 03:48:19,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:19,212 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:48:19,212 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:48:19,218 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:48:19,237 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 03:48:19,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:19,338 INFO L263 TraceCheckSpWp]: Trace formula consists of 430 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-03 03:48:19,341 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:48:19,507 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-03 03:48:19,508 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:48:19,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1398941638] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:19,508 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:48:19,508 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 14 [2022-11-03 03:48:19,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842908769] [2022-11-03 03:48:19,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:19,510 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 03:48:19,510 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:19,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 03:48:19,511 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2022-11-03 03:48:19,511 INFO L87 Difference]: Start difference. First operand 301 states and 337 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:48:19,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:19,884 INFO L93 Difference]: Finished difference Result 373 states and 421 transitions. [2022-11-03 03:48:19,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 03:48:19,885 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-11-03 03:48:19,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:19,887 INFO L225 Difference]: With dead ends: 373 [2022-11-03 03:48:19,888 INFO L226 Difference]: Without dead ends: 370 [2022-11-03 03:48:19,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2022-11-03 03:48:19,889 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 48 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:19,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 91 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 03:48:19,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2022-11-03 03:48:20,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 356. [2022-11-03 03:48:20,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 241 states have (on average 1.1493775933609958) internal successors, (277), 262 states have internal predecessors, (277), 60 states have call successors, (60), 52 states have call predecessors, (60), 54 states have return successors, (64), 54 states have call predecessors, (64), 60 states have call successors, (64) [2022-11-03 03:48:20,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 401 transitions. [2022-11-03 03:48:20,077 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 401 transitions. Word has length 59 [2022-11-03 03:48:20,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:20,077 INFO L495 AbstractCegarLoop]: Abstraction has 356 states and 401 transitions. [2022-11-03 03:48:20,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:48:20,078 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 401 transitions. [2022-11-03 03:48:20,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-03 03:48:20,080 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 03:48:20,080 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:48:20,127 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 03:48:20,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:48:20,293 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 03:48:20,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 03:48:20,294 INFO L85 PathProgramCache]: Analyzing trace with hash -1222060306, now seen corresponding path program 2 times [2022-11-03 03:48:20,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 03:48:20,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351864102] [2022-11-03 03:48:20,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 03:48:20,294 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 03:48:20,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 03:48:20,816 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 10 proven. 10 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 03:48:20,816 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 03:48:20,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351864102] [2022-11-03 03:48:20,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351864102] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 03:48:20,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1147804172] [2022-11-03 03:48:20,817 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 03:48:20,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 03:48:20,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 03:48:20,822 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 03:48:20,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 03:48:20,958 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 03:48:20,959 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 03:48:20,962 INFO L263 TraceCheckSpWp]: Trace formula consists of 430 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-03 03:48:20,965 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 03:48:21,175 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-03 03:48:21,175 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 03:48:21,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1147804172] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 03:48:21,176 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 03:48:21,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [12] total 20 [2022-11-03 03:48:21,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [554508102] [2022-11-03 03:48:21,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 03:48:21,181 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-03 03:48:21,181 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 03:48:21,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-03 03:48:21,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=331, Unknown=0, NotChecked=0, Total=380 [2022-11-03 03:48:21,182 INFO L87 Difference]: Start difference. First operand 356 states and 401 transitions. Second operand has 11 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 9 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:48:21,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 03:48:21,931 INFO L93 Difference]: Finished difference Result 769 states and 897 transitions. [2022-11-03 03:48:21,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 03:48:21,931 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 9 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-11-03 03:48:21,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 03:48:21,932 INFO L225 Difference]: With dead ends: 769 [2022-11-03 03:48:21,932 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 03:48:21,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=89, Invalid=561, Unknown=0, NotChecked=0, Total=650 [2022-11-03 03:48:21,935 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 67 mSDsluCounter, 435 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 362 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 03:48:21,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 397 Invalid, 362 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 338 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 03:48:21,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 03:48:21,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 03:48:21,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 03:48:21,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 03:48:21,938 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 59 [2022-11-03 03:48:21,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 03:48:21,938 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 03:48:21,939 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 3.6666666666666665) internal successors, (33), 9 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-03 03:48:21,939 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 03:48:21,939 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 03:48:21,942 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 03:48:21,994 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 03:48:22,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-03 03:48:22,167 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 03:48:40,892 WARN L234 SmtUtils]: Spent 8.83s on a formula simplification. DAG size of input: 564 DAG size of output: 490 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:48:53,151 WARN L234 SmtUtils]: Spent 11.29s on a formula simplification. DAG size of input: 563 DAG size of output: 481 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:49:07,473 WARN L234 SmtUtils]: Spent 11.90s on a formula simplification. DAG size of input: 563 DAG size of output: 481 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:49:24,219 WARN L234 SmtUtils]: Spent 11.92s on a formula simplification. DAG size of input: 526 DAG size of output: 440 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:49:35,445 WARN L234 SmtUtils]: Spent 11.20s on a formula simplification. DAG size of input: 573 DAG size of output: 488 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:49:41,122 WARN L234 SmtUtils]: Spent 5.65s on a formula simplification. DAG size of input: 515 DAG size of output: 431 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:49:59,814 WARN L234 SmtUtils]: Spent 14.53s on a formula simplification. DAG size of input: 685 DAG size of output: 502 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:50:13,879 WARN L234 SmtUtils]: Spent 11.63s on a formula simplification. DAG size of input: 535 DAG size of output: 443 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-03 03:50:15,431 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 257 263) no Hoare annotation was computed. [2022-11-03 03:50:15,432 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 257 263) the Hoare annotation is: true [2022-11-03 03:50:15,432 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 435 446) the Hoare annotation is: (or (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (= 0 ~systemActive~0)) [2022-11-03 03:50:15,432 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 435 446) no Hoare annotation was computed. [2022-11-03 03:50:15,433 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 447 455) the Hoare annotation is: true [2022-11-03 03:50:15,433 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 447 455) no Hoare annotation was computed. [2022-11-03 03:50:15,437 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (< ~waterLevel~0 2) (<= |old(~waterLevel~0)| ~waterLevel~0) (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) .cse0) (let ((.cse6 (select |#memory_int| 9)) (.cse5 (select |#memory_int| 1)) (.cse8 (select |#memory_int| 5)) (.cse12 (select |#memory_int| 16)) (.cse1 (select |#memory_int| 6)) (.cse7 (select |#memory_int| 8)) (.cse3 (select |#memory_int| 14)) (.cse10 (select |#memory_int| 11)) (.cse9 (select |#memory_int| 7)) (.cse11 (select |#memory_int| 10)) (.cse2 (select |#memory_int| 13)) (.cse4 (select |#memory_int| 15))) (or (not (= (select .cse1 1) 102)) (not (= (select |#length| 6) 4)) (not (= (select |#valid| 23) 1)) (not (= 77 (select .cse2 1))) (not (= (select |#length| 28) 25)) (not (= 73 (select .cse3 2))) (not (= (select .cse4 2) 0)) (not (= (select .cse5 0) 48)) (not (= 30 (select |#length| 23))) (not (= (select .cse6 3) 0)) (not (= |#NULL.offset| 0)) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 4) 13)) (not (= (select .cse7 0) 79)) (not (= (select |#length| 15) 3)) (not (= 31 (select |#length| 2))) (not (= (select .cse6 1) 102)) (not (= (select |#valid| 12) 1)) (not (= (select .cse6 0) 79)) (not (= (select .cse1 2) 102)) (not (= 2 (select |#length| 1))) (not (= 30 (select |#length| 26))) (not (= |old(~waterLevel~0)| 1)) (not (= (select .cse8 0) 79)) (not (= 2 (select |#length| 11))) (not (= 44 (select .cse2 0))) (not (= 58 (select .cse9 5))) (not (= (select .cse6 2) 102)) (not (= 116 (select .cse2 3))) (not (= 1 ~systemActive~0)) (not (= (select .cse1 3) 0)) (not (= (select |#length| 12) 13)) (not (= (select .cse3 0) 67)) (not (= (select |#valid| 6) 1)) (not (= (select |#length| 8) 3)) (not (= (select .cse10 0) 10)) (not (< 0 |#StackHeapBarrier|)) (and (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) (not (= (select .cse8 1) 110)) (not (= (select |#valid| 3) 1)) (not (= 30 (select |#length| 20))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= 25 (select |#length| 25))) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select .cse3 4) 0)) (not (= (select |#valid| 16) 1)) (not (= 101 (select .cse2 2))) (not (= (select |#length| 21) 9)) (not (= (select |#valid| 28) 1)) (not (= (select .cse9 6) 0)) (not (= (select |#valid| 15) 1)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= 109 (select .cse9 3))) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse5 1) 0)) (not (= 3 (select |#length| 5))) (not (= (select |#valid| 24) 1)) (not (= (select .cse9 1) 80)) (not (= (select |#length| 19) 21)) (not (= 5 (select |#length| 14))) (not (= (select |#valid| 19) 1)) (not (= (select .cse11 0) 41)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 3 (select |#length| 10))) (not (= (select .cse8 2) 0)) (not (= 2 (select |#length| 16))) (not (= 41 (select .cse12 0))) (not (= (select |#length| 24) 9)) (not (= 112 (select .cse9 4))) (not (= (select |#valid| 8) 1)) (not (= (select .cse12 1) 0)) (not (= (select |#valid| 4) 1)) (not (= 7 (select |#length| 13))) (not (= (select .cse4 1) 75)) (not (= |#NULL.base| 0)) (not (= 7 (select |#length| 7))) (not (= (select .cse7 2) 0)) (not (= (select |#length| 17) 30)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select .cse1 0) 79)) (not (= (select |#length| 22) 21)) (not (= (select .cse3 1) 82)) (not (= (select |#valid| 14) 1)) (not (= 110 (select .cse7 1))) (not (= (select |#valid| 13) 1)) (not (= 58 (select .cse2 5))) (not (= (select .cse3 3) 84)) (not (= (select |#valid| 2) 1)) (not (= 104 (select .cse2 4))) (not (= (select |#length| 9) 4)) (not (= 9 (select |#length| 18))) (not (= (select .cse10 1) 0)) (not (= (select .cse11 2) 0)) (not (= (select |#valid| 17) 1)) (not (= 44 (select .cse9 0))) (not (= (select |#length| 27) 9)) (not (= 117 (select .cse9 2))) (not (= (select |#valid| 9) 1)) (not (= 32 (select .cse11 1))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 0 (select .cse2 6))) (not (= (select .cse4 0) 79)))) (or (= |old(~pumpRunning~0)| 0) .cse0))) [2022-11-03 03:50:15,440 INFO L895 garLoopResultBuilder]: At program point L329(line 329) the Hoare annotation is: (let ((.cse121 (select |#memory_int| 16)) (.cse115 (select |#memory_int| 10)) (.cse117 (select |#memory_int| 11)) (.cse116 (select |#memory_int| 7)) (.cse122 (select |#memory_int| 5)) (.cse119 (select |#memory_int| 8)) (.cse124 (select |#memory_int| 9)) (.cse123 (select |#memory_int| 1)) (.cse113 (select |#memory_int| 15)) (.cse118 (select |#memory_int| 14)) (.cse114 (select |#memory_int| 13)) (.cse120 (select |#memory_int| 6))) (let ((.cse1 (not (= (select .cse120 1) 102))) (.cse2 (not (= (select |#length| 6) 4))) (.cse3 (not (= (select |#valid| 23) 1))) (.cse4 (not (= 77 (select .cse114 1)))) (.cse5 (not (= (select |#length| 28) 25))) (.cse6 (not (= 73 (select .cse118 2)))) (.cse7 (not (= (select .cse113 2) 0))) (.cse8 (not (= (select .cse123 0) 48))) (.cse9 (not (= 30 (select |#length| 23)))) (.cse10 (not (= (select .cse124 3) 0))) (.cse11 (not (= |#NULL.offset| 0))) (.cse12 (not (= (select |#valid| 26) 1))) (.cse13 (not (= (select |#length| 4) 13))) (.cse14 (not (= (select .cse119 0) 79))) (.cse15 (not (= (select |#length| 15) 3))) (.cse16 (not (= 31 (select |#length| 2)))) (.cse17 (not (= (select .cse124 1) 102))) (.cse18 (not (= (select |#valid| 12) 1))) (.cse19 (not (= (select .cse124 0) 79))) (.cse20 (not (= (select .cse120 2) 102))) (.cse21 (not (= 2 (select |#length| 1)))) (.cse22 (not (= 30 (select |#length| 26)))) (.cse23 (not (= (select .cse122 0) 79))) (.cse24 (not (= 2 (select |#length| 11)))) (.cse25 (not (= 44 (select .cse114 0)))) (.cse26 (not (= 58 (select .cse116 5)))) (.cse27 (not (= (select .cse124 2) 102))) (.cse28 (not (= 116 (select .cse114 3)))) (.cse29 (not (= 1 ~systemActive~0))) (.cse30 (not (= (select .cse120 3) 0))) (.cse31 (not (= (select |#length| 12) 13))) (.cse32 (not (= (select .cse118 0) 67))) (.cse33 (not (= (select |#valid| 6) 1))) (.cse34 (not (= (select |#length| 8) 3))) (.cse35 (not (= (select .cse117 0) 10))) (.cse36 (not (< 0 |#StackHeapBarrier|))) (.cse37 (not (= (select .cse122 1) 110))) (.cse38 (not (= (select |#valid| 3) 1))) (.cse39 (not (= 30 (select |#length| 20)))) (.cse40 (not (= (select |#valid| 25) 1))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= (select |#valid| 20) 1))) (.cse43 (not (= 25 (select |#length| 25)))) (.cse44 (not (= (select |#valid| 21) 1))) (.cse45 (not (= (select |#valid| 11) 1))) (.cse46 (not (= (select .cse118 4) 0))) (.cse47 (not (= (select |#valid| 16) 1))) (.cse48 (not (= 101 (select .cse114 2)))) (.cse49 (not (= (select |#length| 21) 9))) (.cse50 (not (= (select |#valid| 28) 1))) (.cse51 (not (= (select .cse116 6) 0))) (.cse52 (not (= (select |#valid| 15) 1))) (.cse53 (not (= 1 (select |#valid| 5)))) (.cse54 (not (= (select |#length| 3) 12))) (.cse55 (not (= (select |#valid| 0) 0))) (.cse56 (not (= 109 (select .cse116 3)))) (.cse57 (not (= ~methaneLevelCritical~0 0))) (.cse58 (not (= (select |#valid| 27) 1))) (.cse59 (not (= (select .cse123 1) 0))) (.cse60 (not (= 3 (select |#length| 5)))) (.cse61 (not (= (select |#valid| 24) 1))) (.cse62 (not (= (select .cse116 1) 80))) (.cse63 (not (= (select |#length| 19) 21))) (.cse64 (not (= 5 (select |#length| 14)))) (.cse65 (not (= (select |#valid| 19) 1))) (.cse66 (not (= (select .cse115 0) 41))) (.cse67 (not (= (select |#valid| 1) 1))) (.cse68 (not (= (select |#valid| 22) 1))) (.cse69 (not (= 3 (select |#length| 10)))) (.cse70 (not (= (select .cse122 2) 0))) (.cse71 (not (= 2 (select |#length| 16)))) (.cse72 (not (= 41 (select .cse121 0)))) (.cse73 (not (= (select |#length| 24) 9))) (.cse74 (not (= 112 (select .cse116 4)))) (.cse75 (not (= (select |#valid| 8) 1))) (.cse76 (not (= (select .cse121 1) 0))) (.cse77 (not (= (select |#valid| 4) 1))) (.cse78 (not (= 7 (select |#length| 13)))) (.cse79 (not (= (select .cse113 1) 75))) (.cse80 (not (= |#NULL.base| 0))) (.cse81 (not (= 7 (select |#length| 7)))) (.cse82 (not (= (select .cse119 2) 0))) (.cse83 (not (= (select |#length| 17) 30))) (.cse84 (not (= (select |#valid| 7) 1))) (.cse85 (not (= (select |#valid| 10) 1))) (.cse86 (not (= (select .cse120 0) 79))) (.cse87 (not (= (select |#length| 22) 21))) (.cse88 (not (= (select .cse118 1) 82))) (.cse89 (not (= (select |#valid| 14) 1))) (.cse90 (not (= 110 (select .cse119 1)))) (.cse91 (not (= (select |#valid| 13) 1))) (.cse92 (not (= 58 (select .cse114 5)))) (.cse93 (not (= (select .cse118 3) 84))) (.cse94 (not (= (select |#valid| 2) 1))) (.cse95 (not (= 104 (select .cse114 4)))) (.cse96 (not (= (select |#length| 9) 4))) (.cse97 (not (= 9 (select |#length| 18)))) (.cse98 (not (= (select .cse117 1) 0))) (.cse99 (not (= (select .cse115 2) 0))) (.cse100 (not (= (select |#valid| 17) 1))) (.cse101 (not (= 44 (select .cse116 0)))) (.cse102 (not (= (select |#length| 27) 9))) (.cse103 (not (= 117 (select .cse116 2)))) (.cse104 (not (= (select |#valid| 9) 1))) (.cse105 (not (= 32 (select .cse115 1)))) (.cse106 (not (= ~head~0.base 0))) (.cse107 (not (= ~cleanupTimeShifts~0 4))) (.cse108 (not (= (select |#valid| 18) 1))) (.cse109 (not (= 0 (select .cse114 6)))) (.cse110 (not (= (select .cse113 0) 79))) (.cse0 (= 0 ~systemActive~0)) (.cse111 (not (<= |old(~waterLevel~0)| 2))) (.cse112 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and (< ~waterLevel~0 2) (<= 0 |timeShift_processEnvironment_~tmp~2#1|))) (= ~pumpRunning~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)) .cse0) (or .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 (not (= |old(~waterLevel~0)| 1)) .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110) (or (= |old(~pumpRunning~0)| 0) .cse0) (or .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (and (= |timeShift_isHighWaterLevel_~tmp~4#1| 0) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse111 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse112 .cse110) (or (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse0 .cse111 .cse112)))) [2022-11-03 03:50:15,443 INFO L895 garLoopResultBuilder]: At program point L329-1(line 329) the Hoare annotation is: (let ((.cse121 (select |#memory_int| 16)) (.cse115 (select |#memory_int| 10)) (.cse117 (select |#memory_int| 11)) (.cse116 (select |#memory_int| 7)) (.cse122 (select |#memory_int| 5)) (.cse119 (select |#memory_int| 8)) (.cse124 (select |#memory_int| 9)) (.cse123 (select |#memory_int| 1)) (.cse113 (select |#memory_int| 15)) (.cse118 (select |#memory_int| 14)) (.cse114 (select |#memory_int| 13)) (.cse120 (select |#memory_int| 6))) (let ((.cse1 (not (= (select .cse120 1) 102))) (.cse2 (not (= (select |#length| 6) 4))) (.cse3 (not (= (select |#valid| 23) 1))) (.cse4 (not (= 77 (select .cse114 1)))) (.cse5 (not (= (select |#length| 28) 25))) (.cse6 (not (= 73 (select .cse118 2)))) (.cse7 (not (= (select .cse113 2) 0))) (.cse8 (not (= (select .cse123 0) 48))) (.cse9 (not (= 30 (select |#length| 23)))) (.cse10 (not (= (select .cse124 3) 0))) (.cse11 (not (= |#NULL.offset| 0))) (.cse12 (not (= (select |#valid| 26) 1))) (.cse13 (not (= (select |#length| 4) 13))) (.cse14 (not (= (select .cse119 0) 79))) (.cse15 (not (= (select |#length| 15) 3))) (.cse16 (not (= 31 (select |#length| 2)))) (.cse17 (not (= (select .cse124 1) 102))) (.cse18 (not (= (select |#valid| 12) 1))) (.cse19 (not (= (select .cse124 0) 79))) (.cse20 (not (= (select .cse120 2) 102))) (.cse21 (not (= 2 (select |#length| 1)))) (.cse22 (not (= 30 (select |#length| 26)))) (.cse23 (not (= (select .cse122 0) 79))) (.cse24 (not (= 2 (select |#length| 11)))) (.cse25 (not (= 44 (select .cse114 0)))) (.cse26 (not (= 58 (select .cse116 5)))) (.cse27 (not (= (select .cse124 2) 102))) (.cse28 (not (= 116 (select .cse114 3)))) (.cse29 (not (= 1 ~systemActive~0))) (.cse30 (not (= (select .cse120 3) 0))) (.cse31 (not (= (select |#length| 12) 13))) (.cse32 (not (= (select .cse118 0) 67))) (.cse33 (not (= (select |#valid| 6) 1))) (.cse34 (not (= (select |#length| 8) 3))) (.cse35 (not (= (select .cse117 0) 10))) (.cse36 (not (< 0 |#StackHeapBarrier|))) (.cse37 (not (= (select .cse122 1) 110))) (.cse38 (not (= (select |#valid| 3) 1))) (.cse39 (not (= 30 (select |#length| 20)))) (.cse40 (not (= (select |#valid| 25) 1))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= (select |#valid| 20) 1))) (.cse43 (not (= 25 (select |#length| 25)))) (.cse44 (not (= (select |#valid| 21) 1))) (.cse45 (not (= (select |#valid| 11) 1))) (.cse46 (not (= (select .cse118 4) 0))) (.cse47 (not (= (select |#valid| 16) 1))) (.cse48 (not (= 101 (select .cse114 2)))) (.cse49 (not (= (select |#length| 21) 9))) (.cse50 (not (= (select |#valid| 28) 1))) (.cse51 (not (= (select .cse116 6) 0))) (.cse52 (not (= (select |#valid| 15) 1))) (.cse53 (not (= 1 (select |#valid| 5)))) (.cse54 (not (= (select |#length| 3) 12))) (.cse55 (not (= (select |#valid| 0) 0))) (.cse56 (not (= 109 (select .cse116 3)))) (.cse57 (not (= ~methaneLevelCritical~0 0))) (.cse58 (not (= (select |#valid| 27) 1))) (.cse59 (not (= (select .cse123 1) 0))) (.cse60 (not (= 3 (select |#length| 5)))) (.cse61 (not (= (select |#valid| 24) 1))) (.cse62 (not (= (select .cse116 1) 80))) (.cse63 (not (= (select |#length| 19) 21))) (.cse64 (not (= 5 (select |#length| 14)))) (.cse65 (not (= (select |#valid| 19) 1))) (.cse66 (not (= (select .cse115 0) 41))) (.cse67 (not (= (select |#valid| 1) 1))) (.cse68 (not (= (select |#valid| 22) 1))) (.cse69 (not (= 3 (select |#length| 10)))) (.cse70 (not (= (select .cse122 2) 0))) (.cse71 (not (= 2 (select |#length| 16)))) (.cse72 (not (= 41 (select .cse121 0)))) (.cse73 (not (= (select |#length| 24) 9))) (.cse74 (not (= 112 (select .cse116 4)))) (.cse75 (not (= (select |#valid| 8) 1))) (.cse76 (not (= (select .cse121 1) 0))) (.cse77 (not (= (select |#valid| 4) 1))) (.cse78 (not (= 7 (select |#length| 13)))) (.cse79 (not (= (select .cse113 1) 75))) (.cse80 (not (= |#NULL.base| 0))) (.cse81 (not (= 7 (select |#length| 7)))) (.cse82 (not (= (select .cse119 2) 0))) (.cse83 (not (= (select |#length| 17) 30))) (.cse84 (not (= (select |#valid| 7) 1))) (.cse85 (not (= (select |#valid| 10) 1))) (.cse86 (not (= (select .cse120 0) 79))) (.cse87 (not (= (select |#length| 22) 21))) (.cse88 (not (= (select .cse118 1) 82))) (.cse89 (not (= (select |#valid| 14) 1))) (.cse90 (not (= 110 (select .cse119 1)))) (.cse91 (not (= (select |#valid| 13) 1))) (.cse92 (not (= 58 (select .cse114 5)))) (.cse93 (not (= (select .cse118 3) 84))) (.cse94 (not (= (select |#valid| 2) 1))) (.cse95 (not (= 104 (select .cse114 4)))) (.cse96 (not (= (select |#length| 9) 4))) (.cse97 (not (= 9 (select |#length| 18)))) (.cse98 (not (= (select .cse117 1) 0))) (.cse99 (not (= (select .cse115 2) 0))) (.cse100 (not (= (select |#valid| 17) 1))) (.cse101 (not (= 44 (select .cse116 0)))) (.cse102 (not (= (select |#length| 27) 9))) (.cse103 (not (= 117 (select .cse116 2)))) (.cse104 (not (= (select |#valid| 9) 1))) (.cse105 (not (= 32 (select .cse115 1)))) (.cse106 (not (= ~head~0.base 0))) (.cse107 (not (= ~cleanupTimeShifts~0 4))) (.cse108 (not (= (select |#valid| 18) 1))) (.cse109 (not (= 0 (select .cse114 6)))) (.cse110 (not (= (select .cse113 0) 79))) (.cse0 (= 0 ~systemActive~0)) (.cse111 (not (<= |old(~waterLevel~0)| 2))) (.cse112 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and (< ~waterLevel~0 2) (<= 0 |timeShift_processEnvironment_~tmp~2#1|))) (= ~pumpRunning~0 0) (= |timeShift_isMethaneAlarm_#t~ret11#1| ~methaneLevelCritical~0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)) .cse0) (or .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 (not (= |old(~waterLevel~0)| 1)) .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110) (or (= |old(~pumpRunning~0)| 0) .cse0) (or .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse111 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 (and (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse112 .cse110) (or (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse0 .cse111 .cse112)))) [2022-11-03 03:50:15,444 INFO L899 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-11-03 03:50:15,446 INFO L895 garLoopResultBuilder]: At program point L928(lines 928 941) the Hoare annotation is: (let ((.cse118 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not .cse118)) (.cse116 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1)) (.cse131 (select |#memory_int| 16)) (.cse125 (select |#memory_int| 10)) (.cse127 (select |#memory_int| 11)) (.cse126 (select |#memory_int| 7)) (.cse132 (select |#memory_int| 5)) (.cse129 (select |#memory_int| 8)) (.cse134 (select |#memory_int| 9)) (.cse133 (select |#memory_int| 1)) (.cse123 (select |#memory_int| 15)) (.cse128 (select |#memory_int| 14)) (.cse124 (select |#memory_int| 13)) (.cse130 (select |#memory_int| 6)) (.cse115 (= ~methaneLevelCritical~0 0)) (.cse121 (= ~pumpRunning~0 0))) (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse117 (not .cse121)) (.cse119 (not .cse115)) (.cse6 (not (= (select .cse130 1) 102))) (.cse7 (not (= (select |#length| 6) 4))) (.cse8 (not (= (select |#valid| 23) 1))) (.cse9 (not (= 77 (select .cse124 1)))) (.cse10 (not (= (select |#length| 28) 25))) (.cse11 (not (= 73 (select .cse128 2)))) (.cse12 (not (= (select .cse123 2) 0))) (.cse13 (not (= (select .cse133 0) 48))) (.cse14 (not (= 30 (select |#length| 23)))) (.cse15 (not (= (select .cse134 3) 0))) (.cse16 (not (= |#NULL.offset| 0))) (.cse17 (not (= (select |#valid| 26) 1))) (.cse18 (not (= (select |#length| 4) 13))) (.cse19 (not (= (select .cse129 0) 79))) (.cse20 (not (= (select |#length| 15) 3))) (.cse21 (not (= 31 (select |#length| 2)))) (.cse22 (not (= (select .cse134 1) 102))) (.cse23 (not (= (select |#valid| 12) 1))) (.cse24 (not (= (select .cse134 0) 79))) (.cse25 (not (= (select .cse130 2) 102))) (.cse26 (not (= 2 (select |#length| 1)))) (.cse27 (not (= 30 (select |#length| 26)))) (.cse28 (not (= (select .cse132 0) 79))) (.cse29 (not (= 2 (select |#length| 11)))) (.cse30 (not (= 44 (select .cse124 0)))) (.cse31 (not (= 58 (select .cse126 5)))) (.cse32 (not (= (select .cse134 2) 102))) (.cse33 (not (= 116 (select .cse124 3)))) (.cse34 (not (= 1 ~systemActive~0))) (.cse35 (not (= (select .cse130 3) 0))) (.cse36 (not (= (select |#length| 12) 13))) (.cse37 (not (= (select .cse128 0) 67))) (.cse38 (not (= (select |#valid| 6) 1))) (.cse39 (not (= (select |#length| 8) 3))) (.cse40 (not (= (select .cse127 0) 10))) (.cse41 (not (< 0 |#StackHeapBarrier|))) (.cse42 (not (= (select .cse132 1) 110))) (.cse43 (not (= (select |#valid| 3) 1))) (.cse44 (not (= 30 (select |#length| 20)))) (.cse45 (not (= (select |#valid| 25) 1))) (.cse46 (not (= ~head~0.offset 0))) (.cse47 (not (= (select |#valid| 20) 1))) (.cse48 (not (= 25 (select |#length| 25)))) (.cse49 (not (= (select |#valid| 21) 1))) (.cse50 (not (= (select |#valid| 11) 1))) (.cse51 (not (= (select .cse128 4) 0))) (.cse52 (not (= (select |#valid| 16) 1))) (.cse53 (not (= 101 (select .cse124 2)))) (.cse54 (not (= (select |#length| 21) 9))) (.cse55 (not (= (select |#valid| 28) 1))) (.cse56 (not (= (select .cse126 6) 0))) (.cse57 (not (= (select |#valid| 15) 1))) (.cse58 (not (= 1 (select |#valid| 5)))) (.cse59 (not (= (select |#length| 3) 12))) (.cse60 (not (= (select |#valid| 0) 0))) (.cse61 (not (= 109 (select .cse126 3)))) (.cse62 (not (= (select |#valid| 27) 1))) (.cse63 (not (= (select .cse133 1) 0))) (.cse64 (not (= 3 (select |#length| 5)))) (.cse65 (not (= (select |#valid| 24) 1))) (.cse66 (not (= (select .cse126 1) 80))) (.cse67 (not (= (select |#length| 19) 21))) (.cse68 (not (= 5 (select |#length| 14)))) (.cse69 (not (= (select |#valid| 19) 1))) (.cse70 (not (= (select .cse125 0) 41))) (.cse71 (not (= (select |#valid| 1) 1))) (.cse72 (not (= (select |#valid| 22) 1))) (.cse73 (not (= 3 (select |#length| 10)))) (.cse74 (not (= (select .cse132 2) 0))) (.cse75 (not (= 2 (select |#length| 16)))) (.cse76 (not (= 41 (select .cse131 0)))) (.cse77 (not (= (select |#length| 24) 9))) (.cse78 (not (= 112 (select .cse126 4)))) (.cse79 (not (= (select |#valid| 8) 1))) (.cse80 (not (= (select .cse131 1) 0))) (.cse81 (not (= (select |#valid| 4) 1))) (.cse82 (not (= 7 (select |#length| 13)))) (.cse83 (not (= (select .cse123 1) 75))) (.cse84 (not (= |#NULL.base| 0))) (.cse85 (not (= 7 (select |#length| 7)))) (.cse86 (not (= (select .cse129 2) 0))) (.cse87 (not (= (select |#length| 17) 30))) (.cse88 (not (= (select |#valid| 7) 1))) (.cse89 (not (= (select |#valid| 10) 1))) (.cse90 (not (= (select .cse130 0) 79))) (.cse91 (not (= (select |#length| 22) 21))) (.cse92 (not (= (select .cse128 1) 82))) (.cse93 (not (= (select |#valid| 14) 1))) (.cse94 (not (= 110 (select .cse129 1)))) (.cse95 (not (= (select |#valid| 13) 1))) (.cse96 (not (= 58 (select .cse124 5)))) (.cse97 (not (= (select .cse128 3) 84))) (.cse98 (not (= (select |#valid| 2) 1))) (.cse99 (not (= 104 (select .cse124 4)))) (.cse100 (not (= (select |#length| 9) 4))) (.cse101 (not (= 9 (select |#length| 18)))) (.cse102 (not (= (select .cse127 1) 0))) (.cse103 (not (= (select .cse125 2) 0))) (.cse104 (not (= (select |#valid| 17) 1))) (.cse105 (not (= 44 (select .cse126 0)))) (.cse106 (not (= (select |#length| 27) 9))) (.cse107 (not (= 117 (select .cse126 2)))) (.cse108 (not (= (select |#valid| 9) 1))) (.cse109 (not (= 32 (select .cse125 1)))) (.cse110 (not (= ~head~0.base 0))) (.cse111 (not (= ~cleanupTimeShifts~0 4))) (.cse112 (not (= (select |#valid| 18) 1))) (.cse113 (not (= 0 (select .cse124 6)))) (.cse114 (not (= (select .cse123 0) 79))) (.cse0 (or .cse2 (and (or (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 2) (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| |old(~waterLevel~0)|)) (or (not .cse116) (<= |old(~waterLevel~0)| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|))))) (.cse120 (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse1 (= ~pumpRunning~0 1)) (.cse122 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= 0 ~systemActive~0))) (and (or (and (= |timeShift_processEnvironment_~tmp~2#1| 1) .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse10 .cse2 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 (and (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp~4#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_activatePump_~tmp~3#1| 0) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isMethaneAlarm_~retValue_acc~1#1| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~3#1| 1) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~1#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse4 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse5 .cse114) (or .cse115 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse116 (<= ~waterLevel~0 1)) .cse3) (or .cse117 .cse118 .cse119 .cse3) (or .cse117 .cse119 (and .cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|) (< ~waterLevel~0 2) (<= |old(~waterLevel~0)| ~waterLevel~0) .cse120) .cse3) (or .cse6 .cse7 .cse8 .cse9 .cse10 .cse2 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (and .cse121 (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) .cse25 .cse26 .cse27 .cse122 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114) (or .cse2 (and .cse0 .cse120 (= ~waterLevel~0 1) .cse1) .cse121 .cse122 .cse3))))) [2022-11-03 03:50:15,450 INFO L895 garLoopResultBuilder]: At program point L928-1(lines 913 945) the Hoare annotation is: (let ((.cse12 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0)) (.cse126 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse135 (select |#memory_int| 16)) (.cse129 (select |#memory_int| 10)) (.cse131 (select |#memory_int| 11)) (.cse130 (select |#memory_int| 7)) (.cse136 (select |#memory_int| 5)) (.cse133 (select |#memory_int| 8)) (.cse138 (select |#memory_int| 9)) (.cse137 (select |#memory_int| 1)) (.cse127 (select |#memory_int| 15)) (.cse132 (select |#memory_int| 14)) (.cse128 (select |#memory_int| 13)) (.cse134 (select |#memory_int| 6)) (.cse8 (not .cse9)) (.cse10 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (.cse124 (not (= |old(~waterLevel~0)| 1))) (.cse139 (not .cse126)) (.cse140 (not .cse1)) (.cse0 (not .cse12))) (let ((.cse5 (< ~waterLevel~0 2)) (.cse4 (or .cse0 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse7 (and .cse139 .cse9 .cse140)) (.cse6 (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse44 (= ~pumpRunning~0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse45 (= ~pumpRunning~0 1)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse11 (and .cse139 .cse8 .cse10 (or .cse124 (<= 2 ~waterLevel~0)) .cse140)) (.cse13 (not (= (select .cse134 1) 102))) (.cse14 (not (= (select |#length| 6) 4))) (.cse15 (not (= (select |#valid| 23) 1))) (.cse16 (not (= 77 (select .cse128 1)))) (.cse17 (not (= (select |#length| 28) 25))) (.cse18 (not (= 73 (select .cse132 2)))) (.cse19 (not (= (select .cse127 2) 0))) (.cse20 (not (= (select .cse137 0) 48))) (.cse21 (not (= 30 (select |#length| 23)))) (.cse22 (not (= (select .cse138 3) 0))) (.cse23 (not (= |#NULL.offset| 0))) (.cse24 (not (= (select |#valid| 26) 1))) (.cse25 (not (= (select |#length| 4) 13))) (.cse26 (not (= (select .cse133 0) 79))) (.cse27 (not (= (select |#length| 15) 3))) (.cse28 (not (= 31 (select |#length| 2)))) (.cse29 (not (= (select .cse138 1) 102))) (.cse30 (not (= (select |#valid| 12) 1))) (.cse31 (not (= (select .cse138 0) 79))) (.cse32 (not (= (select .cse134 2) 102))) (.cse33 (not (= 2 (select |#length| 1)))) (.cse34 (not (= 30 (select |#length| 26)))) (.cse35 (not (= (select .cse136 0) 79))) (.cse36 (not (= 2 (select |#length| 11)))) (.cse37 (not (= 44 (select .cse128 0)))) (.cse38 (not (= 58 (select .cse130 5)))) (.cse39 (not (= (select .cse138 2) 102))) (.cse40 (not (= 116 (select .cse128 3)))) (.cse41 (not (= 1 ~systemActive~0))) (.cse42 (not (= (select .cse134 3) 0))) (.cse43 (not (= (select |#length| 12) 13))) (.cse46 (not (= (select .cse132 0) 67))) (.cse47 (not (= (select |#valid| 6) 1))) (.cse48 (not (= (select |#length| 8) 3))) (.cse49 (not (= (select .cse131 0) 10))) (.cse50 (not (< 0 |#StackHeapBarrier|))) (.cse51 (not (= (select .cse136 1) 110))) (.cse52 (not (= (select |#valid| 3) 1))) (.cse53 (not (= 30 (select |#length| 20)))) (.cse54 (not (= (select |#valid| 25) 1))) (.cse55 (not (= ~head~0.offset 0))) (.cse56 (not (= (select |#valid| 20) 1))) (.cse57 (not (= 25 (select |#length| 25)))) (.cse58 (not (= (select |#valid| 21) 1))) (.cse59 (not (= (select |#valid| 11) 1))) (.cse60 (not (= (select .cse132 4) 0))) (.cse61 (not (= (select |#valid| 16) 1))) (.cse62 (not (= 101 (select .cse128 2)))) (.cse63 (not (= (select |#length| 21) 9))) (.cse64 (not (= (select |#valid| 28) 1))) (.cse65 (not (= (select .cse130 6) 0))) (.cse66 (not (= (select |#valid| 15) 1))) (.cse67 (not (= 1 (select |#valid| 5)))) (.cse68 (not (= (select |#length| 3) 12))) (.cse69 (not (= (select |#valid| 0) 0))) (.cse70 (not (= 109 (select .cse130 3)))) (.cse71 (not (= (select |#valid| 27) 1))) (.cse72 (not (= (select .cse137 1) 0))) (.cse73 (not (= 3 (select |#length| 5)))) (.cse74 (not (= (select |#valid| 24) 1))) (.cse75 (not (= (select .cse130 1) 80))) (.cse76 (not (= (select |#length| 19) 21))) (.cse77 (not (= 5 (select |#length| 14)))) (.cse78 (not (= (select |#valid| 19) 1))) (.cse79 (not (= (select .cse129 0) 41))) (.cse80 (not (= (select |#valid| 1) 1))) (.cse81 (not (= (select |#valid| 22) 1))) (.cse82 (not (= 3 (select |#length| 10)))) (.cse83 (not (= (select .cse136 2) 0))) (.cse84 (not (= 2 (select |#length| 16)))) (.cse85 (not (= 41 (select .cse135 0)))) (.cse86 (not (= (select |#length| 24) 9))) (.cse87 (not (= 112 (select .cse130 4)))) (.cse88 (not (= (select |#valid| 8) 1))) (.cse89 (not (= (select .cse135 1) 0))) (.cse90 (not (= (select |#valid| 4) 1))) (.cse91 (not (= 7 (select |#length| 13)))) (.cse92 (not (= (select .cse127 1) 75))) (.cse93 (not (= |#NULL.base| 0))) (.cse94 (not (= 7 (select |#length| 7)))) (.cse95 (not (= (select .cse133 2) 0))) (.cse96 (not (= (select |#length| 17) 30))) (.cse97 (not (= (select |#valid| 7) 1))) (.cse98 (not (= (select |#valid| 10) 1))) (.cse99 (not (= (select .cse134 0) 79))) (.cse100 (not (= (select |#length| 22) 21))) (.cse101 (not (= (select .cse132 1) 82))) (.cse102 (not (= (select |#valid| 14) 1))) (.cse125 (= ~waterLevel~0 1)) (.cse103 (not (= 110 (select .cse133 1)))) (.cse104 (not (= (select |#valid| 13) 1))) (.cse105 (not (= 58 (select .cse128 5)))) (.cse106 (not (= (select .cse132 3) 84))) (.cse107 (not (= (select |#valid| 2) 1))) (.cse108 (not (= 104 (select .cse128 4)))) (.cse109 (not (= (select |#length| 9) 4))) (.cse110 (not (= 9 (select |#length| 18)))) (.cse111 (not (= (select .cse131 1) 0))) (.cse112 (not (= (select .cse129 2) 0))) (.cse113 (not (= (select |#valid| 17) 1))) (.cse114 (not (= 44 (select .cse130 0)))) (.cse115 (not (= (select |#length| 27) 9))) (.cse116 (not (= 117 (select .cse130 2)))) (.cse117 (not (= (select |#valid| 9) 1))) (.cse118 (not (= 32 (select .cse129 1)))) (.cse119 (not (= ~head~0.base 0))) (.cse120 (not (= ~cleanupTimeShifts~0 4))) (.cse121 (not (= (select |#valid| 18) 1))) (.cse122 (not (= 0 (select .cse128 6)))) (.cse123 (not (= (select .cse127 0) 79)))) (and (or .cse0 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6) .cse7 .cse8 .cse1) (or .cse9 (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and .cse5 .cse6)) .cse4 .cse10) .cse1 .cse11) (or .cse7 .cse12 .cse8 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse1) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (and (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp~4#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_activatePump_~tmp~3#1| 0) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse44 (<= |timeShift_isMethaneAlarm_~retValue_acc~1#1| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~3#1| 1) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~1#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) .cse45 (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse8 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse2 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse3 .cse123) (or .cse0 .cse124 (and .cse6 .cse125 .cse45) .cse8 (and .cse126 .cse125) .cse1) (or .cse0 .cse8 .cse44 .cse1 .cse2 .cse45 .cse3) (or .cse9 .cse12 .cse1 .cse11) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse124 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse8 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 (and .cse126 (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) .cse125 (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse123))))) [2022-11-03 03:50:15,450 INFO L895 garLoopResultBuilder]: At program point L284(line 284) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0) (or .cse1 (= ~methaneLevelCritical~0 0) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse0) (or .cse2 .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse1 .cse0))) [2022-11-03 03:50:15,452 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 265 289) the Hoare annotation is: (let ((.cse32 (= ~pumpRunning~0 0)) (.cse12 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse132 (select |#memory_int| 16)) (.cse126 (select |#memory_int| 10)) (.cse128 (select |#memory_int| 11)) (.cse127 (select |#memory_int| 7)) (.cse133 (select |#memory_int| 5)) (.cse130 (select |#memory_int| 8)) (.cse135 (select |#memory_int| 9)) (.cse134 (select |#memory_int| 1)) (.cse124 (select |#memory_int| 15)) (.cse129 (select |#memory_int| 14)) (.cse125 (select |#memory_int| 13)) (.cse131 (select |#memory_int| 6)) (.cse0 (not .cse12)) (.cse11 (not .cse32)) (.cse36 (not (= |old(~waterLevel~0)| 1)))) (let ((.cse8 (and .cse11 .cse36)) (.cse7 (or .cse0 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse5 (< ~waterLevel~0 2)) (.cse13 (not (= (select .cse131 1) 102))) (.cse14 (not (= (select |#length| 6) 4))) (.cse15 (not (= (select |#valid| 23) 1))) (.cse16 (not (= 77 (select .cse125 1)))) (.cse17 (not (= (select |#length| 28) 25))) (.cse18 (not (= 73 (select .cse129 2)))) (.cse19 (not (= (select .cse124 2) 0))) (.cse20 (not (= (select .cse134 0) 48))) (.cse21 (not (= 30 (select |#length| 23)))) (.cse22 (not (= (select .cse135 3) 0))) (.cse23 (not (= |#NULL.offset| 0))) (.cse24 (not (= (select |#valid| 26) 1))) (.cse25 (not (= (select |#length| 4) 13))) (.cse26 (not (= (select .cse130 0) 79))) (.cse27 (not (= (select |#length| 15) 3))) (.cse28 (not (= 31 (select |#length| 2)))) (.cse29 (not (= (select .cse135 1) 102))) (.cse30 (not (= (select |#valid| 12) 1))) (.cse31 (not (= (select .cse135 0) 79))) (.cse33 (not (= (select .cse131 2) 102))) (.cse34 (not (= 2 (select |#length| 1)))) (.cse35 (not (= 30 (select |#length| 26)))) (.cse37 (not (= (select .cse133 0) 79))) (.cse38 (not (= 2 (select |#length| 11)))) (.cse39 (not (= 44 (select .cse125 0)))) (.cse40 (not (= 58 (select .cse127 5)))) (.cse41 (not (= (select .cse135 2) 102))) (.cse42 (not (= 116 (select .cse125 3)))) (.cse43 (not (= 1 ~systemActive~0))) (.cse44 (not (= (select .cse131 3) 0))) (.cse45 (not (= (select |#length| 12) 13))) (.cse46 (not (= (select .cse129 0) 67))) (.cse47 (not (= (select |#valid| 6) 1))) (.cse48 (not (= (select |#length| 8) 3))) (.cse49 (not (= (select .cse128 0) 10))) (.cse50 (not (< 0 |#StackHeapBarrier|))) (.cse51 (not (= (select .cse133 1) 110))) (.cse52 (not (= (select |#valid| 3) 1))) (.cse53 (not (= 30 (select |#length| 20)))) (.cse54 (not (= (select |#valid| 25) 1))) (.cse55 (not (= ~head~0.offset 0))) (.cse56 (not (= (select |#valid| 20) 1))) (.cse57 (not (= 25 (select |#length| 25)))) (.cse58 (not (= (select |#valid| 21) 1))) (.cse59 (not (= (select |#valid| 11) 1))) (.cse60 (not (= (select .cse129 4) 0))) (.cse61 (not (= (select |#valid| 16) 1))) (.cse62 (not (= 101 (select .cse125 2)))) (.cse63 (not (= (select |#length| 21) 9))) (.cse64 (not (= (select |#valid| 28) 1))) (.cse65 (not (= (select .cse127 6) 0))) (.cse66 (not (= (select |#valid| 15) 1))) (.cse67 (not (= 1 (select |#valid| 5)))) (.cse68 (not (= (select |#length| 3) 12))) (.cse69 (not (= (select |#valid| 0) 0))) (.cse70 (not (= 109 (select .cse127 3)))) (.cse71 (not (= (select |#valid| 27) 1))) (.cse72 (not (= (select .cse134 1) 0))) (.cse73 (not (= 3 (select |#length| 5)))) (.cse74 (not (= (select |#valid| 24) 1))) (.cse75 (not (= (select .cse127 1) 80))) (.cse76 (not (= (select |#length| 19) 21))) (.cse77 (not (= 5 (select |#length| 14)))) (.cse78 (not (= (select |#valid| 19) 1))) (.cse79 (not (= (select .cse126 0) 41))) (.cse80 (not (= (select |#valid| 1) 1))) (.cse81 (not (= (select |#valid| 22) 1))) (.cse82 (not (= 3 (select |#length| 10)))) (.cse83 (not (= (select .cse133 2) 0))) (.cse84 (not (= 2 (select |#length| 16)))) (.cse85 (not (= 41 (select .cse132 0)))) (.cse86 (not (= (select |#length| 24) 9))) (.cse87 (not (= 112 (select .cse127 4)))) (.cse88 (not (= (select |#valid| 8) 1))) (.cse89 (not (= (select .cse132 1) 0))) (.cse90 (not (= (select |#valid| 4) 1))) (.cse91 (not (= 7 (select |#length| 13)))) (.cse92 (not (= (select .cse124 1) 75))) (.cse93 (not (= |#NULL.base| 0))) (.cse94 (not (= 7 (select |#length| 7)))) (.cse95 (not (= (select .cse130 2) 0))) (.cse96 (not (= (select |#length| 17) 30))) (.cse97 (not (= (select |#valid| 7) 1))) (.cse98 (not (= (select |#valid| 10) 1))) (.cse99 (not (= (select .cse131 0) 79))) (.cse100 (not (= (select |#length| 22) 21))) (.cse101 (not (= (select .cse129 1) 82))) (.cse102 (not (= (select |#valid| 14) 1))) (.cse103 (not (= 110 (select .cse130 1)))) (.cse104 (not (= (select |#valid| 13) 1))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse105 (not (= 58 (select .cse125 5)))) (.cse106 (not (= (select .cse129 3) 84))) (.cse107 (not (= (select |#valid| 2) 1))) (.cse108 (not (= 104 (select .cse125 4)))) (.cse109 (not (= (select |#length| 9) 4))) (.cse110 (not (= 9 (select |#length| 18)))) (.cse111 (not (= (select .cse128 1) 0))) (.cse112 (not (= (select .cse126 2) 0))) (.cse113 (not (= (select |#valid| 17) 1))) (.cse114 (not (= 44 (select .cse127 0)))) (.cse115 (not (= (select |#length| 27) 9))) (.cse116 (not (= 117 (select .cse127 2)))) (.cse117 (not (= (select |#valid| 9) 1))) (.cse118 (not (= 32 (select .cse126 1)))) (.cse119 (not (= ~head~0.base 0))) (.cse120 (not (= ~cleanupTimeShifts~0 4))) (.cse121 (not (= (select |#valid| 18) 1))) (.cse122 (not (= 0 (select .cse125 6)))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse123 (not (= (select .cse124 0) 79))) (.cse6 (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse10 (= ~pumpRunning~0 1)) (.cse9 (not .cse4)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2 .cse3) (or .cse4 (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and .cse5 .cse6)) .cse7) .cse1 .cse8) (or .cse0 .cse9 .cse1 .cse2 .cse10 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse1) (or .cse11 .cse12 .cse9 .cse1) (or .cse4 .cse12 .cse1 .cse8) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 (and .cse32 (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse9 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse123) (or .cse11 (and .cse7 .cse5 .cse6) .cse9 .cse1) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse33 .cse34 .cse35 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse9 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (and (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_activatePump_~tmp~3#1| |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp~4#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (<= |timeShift_isMethaneAlarm_~retValue_acc~1#1| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~3#1| 1) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~1#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse2 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse3 .cse123) (or .cse0 .cse32 .cse36 (and .cse6 (= ~waterLevel~0 1) .cse10) .cse9 .cse1))))) [2022-11-03 03:50:15,453 INFO L895 garLoopResultBuilder]: At program point L507(line 507) the Hoare annotation is: (= 0 ~systemActive~0) [2022-11-03 03:50:15,455 INFO L895 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse32 (= ~pumpRunning~0 0)) (.cse12 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse132 (select |#memory_int| 16)) (.cse126 (select |#memory_int| 10)) (.cse128 (select |#memory_int| 11)) (.cse127 (select |#memory_int| 7)) (.cse133 (select |#memory_int| 5)) (.cse130 (select |#memory_int| 8)) (.cse135 (select |#memory_int| 9)) (.cse134 (select |#memory_int| 1)) (.cse124 (select |#memory_int| 15)) (.cse129 (select |#memory_int| 14)) (.cse125 (select |#memory_int| 13)) (.cse131 (select |#memory_int| 6)) (.cse0 (not .cse12)) (.cse11 (not .cse32)) (.cse36 (not (= |old(~waterLevel~0)| 1)))) (let ((.cse8 (and .cse11 .cse36)) (.cse7 (or .cse0 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse5 (< ~waterLevel~0 2)) (.cse13 (not (= (select .cse131 1) 102))) (.cse14 (not (= (select |#length| 6) 4))) (.cse15 (not (= (select |#valid| 23) 1))) (.cse16 (not (= 77 (select .cse125 1)))) (.cse17 (not (= (select |#length| 28) 25))) (.cse18 (not (= 73 (select .cse129 2)))) (.cse19 (not (= (select .cse124 2) 0))) (.cse20 (not (= (select .cse134 0) 48))) (.cse21 (not (= 30 (select |#length| 23)))) (.cse22 (not (= (select .cse135 3) 0))) (.cse23 (not (= |#NULL.offset| 0))) (.cse24 (not (= (select |#valid| 26) 1))) (.cse25 (not (= (select |#length| 4) 13))) (.cse26 (not (= (select .cse130 0) 79))) (.cse27 (not (= (select |#length| 15) 3))) (.cse28 (not (= 31 (select |#length| 2)))) (.cse29 (not (= (select .cse135 1) 102))) (.cse30 (not (= (select |#valid| 12) 1))) (.cse31 (not (= (select .cse135 0) 79))) (.cse33 (not (= (select .cse131 2) 102))) (.cse34 (not (= 2 (select |#length| 1)))) (.cse35 (not (= 30 (select |#length| 26)))) (.cse37 (not (= (select .cse133 0) 79))) (.cse38 (not (= 2 (select |#length| 11)))) (.cse39 (not (= 44 (select .cse125 0)))) (.cse40 (not (= 58 (select .cse127 5)))) (.cse41 (not (= (select .cse135 2) 102))) (.cse42 (not (= 116 (select .cse125 3)))) (.cse43 (not (= 1 ~systemActive~0))) (.cse44 (not (= (select .cse131 3) 0))) (.cse45 (not (= (select |#length| 12) 13))) (.cse46 (not (= (select .cse129 0) 67))) (.cse47 (not (= (select |#valid| 6) 1))) (.cse48 (not (= (select |#length| 8) 3))) (.cse49 (not (= (select .cse128 0) 10))) (.cse50 (not (< 0 |#StackHeapBarrier|))) (.cse51 (not (= (select .cse133 1) 110))) (.cse52 (not (= (select |#valid| 3) 1))) (.cse53 (not (= 30 (select |#length| 20)))) (.cse54 (not (= (select |#valid| 25) 1))) (.cse55 (not (= ~head~0.offset 0))) (.cse56 (not (= (select |#valid| 20) 1))) (.cse57 (not (= 25 (select |#length| 25)))) (.cse58 (not (= (select |#valid| 21) 1))) (.cse59 (not (= (select |#valid| 11) 1))) (.cse60 (not (= (select .cse129 4) 0))) (.cse61 (not (= (select |#valid| 16) 1))) (.cse62 (not (= 101 (select .cse125 2)))) (.cse63 (not (= (select |#length| 21) 9))) (.cse64 (not (= (select |#valid| 28) 1))) (.cse65 (not (= (select .cse127 6) 0))) (.cse66 (not (= (select |#valid| 15) 1))) (.cse67 (not (= 1 (select |#valid| 5)))) (.cse68 (not (= (select |#length| 3) 12))) (.cse69 (not (= (select |#valid| 0) 0))) (.cse70 (not (= 109 (select .cse127 3)))) (.cse71 (not (= (select |#valid| 27) 1))) (.cse72 (not (= (select .cse134 1) 0))) (.cse73 (not (= 3 (select |#length| 5)))) (.cse74 (not (= (select |#valid| 24) 1))) (.cse75 (not (= (select .cse127 1) 80))) (.cse76 (not (= (select |#length| 19) 21))) (.cse77 (not (= 5 (select |#length| 14)))) (.cse78 (not (= (select |#valid| 19) 1))) (.cse79 (not (= (select .cse126 0) 41))) (.cse80 (not (= (select |#valid| 1) 1))) (.cse81 (not (= (select |#valid| 22) 1))) (.cse82 (not (= 3 (select |#length| 10)))) (.cse83 (not (= (select .cse133 2) 0))) (.cse84 (not (= 2 (select |#length| 16)))) (.cse85 (not (= 41 (select .cse132 0)))) (.cse86 (not (= (select |#length| 24) 9))) (.cse87 (not (= 112 (select .cse127 4)))) (.cse88 (not (= (select |#valid| 8) 1))) (.cse89 (not (= (select .cse132 1) 0))) (.cse90 (not (= (select |#valid| 4) 1))) (.cse91 (not (= 7 (select |#length| 13)))) (.cse92 (not (= (select .cse124 1) 75))) (.cse93 (not (= |#NULL.base| 0))) (.cse94 (not (= 7 (select |#length| 7)))) (.cse95 (not (= (select .cse130 2) 0))) (.cse96 (not (= (select |#length| 17) 30))) (.cse97 (not (= (select |#valid| 7) 1))) (.cse98 (not (= (select |#valid| 10) 1))) (.cse99 (not (= (select .cse131 0) 79))) (.cse100 (not (= (select |#length| 22) 21))) (.cse101 (not (= (select .cse129 1) 82))) (.cse102 (not (= (select |#valid| 14) 1))) (.cse103 (not (= 110 (select .cse130 1)))) (.cse104 (not (= (select |#valid| 13) 1))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse105 (not (= 58 (select .cse125 5)))) (.cse106 (not (= (select .cse129 3) 84))) (.cse107 (not (= (select |#valid| 2) 1))) (.cse108 (not (= 104 (select .cse125 4)))) (.cse109 (not (= (select |#length| 9) 4))) (.cse110 (not (= 9 (select |#length| 18)))) (.cse111 (not (= (select .cse128 1) 0))) (.cse112 (not (= (select .cse126 2) 0))) (.cse113 (not (= (select |#valid| 17) 1))) (.cse114 (not (= 44 (select .cse127 0)))) (.cse115 (not (= (select |#length| 27) 9))) (.cse116 (not (= 117 (select .cse127 2)))) (.cse117 (not (= (select |#valid| 9) 1))) (.cse118 (not (= 32 (select .cse126 1)))) (.cse119 (not (= ~head~0.base 0))) (.cse120 (not (= ~cleanupTimeShifts~0 4))) (.cse121 (not (= (select |#valid| 18) 1))) (.cse122 (not (= 0 (select .cse125 6)))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse123 (not (= (select .cse124 0) 79))) (.cse6 (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse10 (= ~pumpRunning~0 1)) (.cse9 (not .cse4)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2 .cse3) (or .cse4 (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and .cse5 .cse6)) .cse7) .cse1 .cse8) (or .cse0 .cse9 .cse1 .cse2 .cse10 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse1) (or .cse11 .cse12 .cse9 .cse1) (or .cse4 .cse12 .cse1 .cse8) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 (and .cse32 (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse9 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse123) (or .cse11 (and .cse7 .cse5 .cse6) .cse9 .cse1) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse0 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse33 .cse34 .cse35 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse9 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (and (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_activatePump_~tmp~3#1| |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp~4#1|) (= |timeShift_isMethaneAlarm_~retValue_acc~1#1| |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (<= |timeShift_isMethaneAlarm_~retValue_acc~1#1| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= |timeShift_isHighWaterLevel_~retValue_acc~3#1| 1) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~1#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse2 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse3 .cse123) (or .cse0 .cse32 .cse36 (and .cse6 (= ~waterLevel~0 1) .cse10) .cse9 .cse1))))) [2022-11-03 03:50:15,455 INFO L899 garLoopResultBuilder]: For program point L920-1(line 920) no Hoare annotation was computed. [2022-11-03 03:50:15,456 INFO L899 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2022-11-03 03:50:15,456 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 281) no Hoare annotation was computed. [2022-11-03 03:50:15,456 INFO L895 garLoopResultBuilder]: At program point L269(lines 269 286) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0))) (let ((.cse6 (not .cse5)) (.cse8 (not .cse0)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 1)) (.cse4 (not .cse7)) (.cse2 (= 0 ~systemActive~0)) (.cse9 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse0 .cse7 .cse2) (or .cse4 .cse8 .cse2 .cse9) (or (not (<= |old(~waterLevel~0)| 1)) (< ~waterLevel~0 2) .cse2) (or .cse4 .cse5 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse6 .cse7 .cse8 .cse2) (or .cse8 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse9)))) [2022-11-03 03:50:15,458 INFO L895 garLoopResultBuilder]: At program point L922(lines 922 942) the Hoare annotation is: (let ((.cse122 (= |old(~pumpRunning~0)| 0)) (.cse115 (= ~methaneLevelCritical~0 0)) (.cse123 (= ~pumpRunning~0 0))) (let ((.cse121 (not .cse123)) (.cse57 (not .cse115)) (.cse119 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (.cse124 (not (= |old(~waterLevel~0)| 1))) (.cse113 (= 0 ~systemActive~0)) (.cse5 (not .cse122)) (.cse133 (select |#memory_int| 16)) (.cse127 (select |#memory_int| 10)) (.cse129 (select |#memory_int| 11)) (.cse128 (select |#memory_int| 7)) (.cse134 (select |#memory_int| 5)) (.cse131 (select |#memory_int| 8)) (.cse136 (select |#memory_int| 9)) (.cse135 (select |#memory_int| 1)) (.cse125 (select |#memory_int| 15)) (.cse130 (select |#memory_int| 14)) (.cse126 (select |#memory_int| 13)) (.cse132 (select |#memory_int| 6))) (let ((.cse92 (not (<= |old(~waterLevel~0)| 2))) (.cse111 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= (select .cse132 1) 102))) (.cse1 (not (= (select |#length| 6) 4))) (.cse2 (not (= (select |#valid| 23) 1))) (.cse3 (not (= 77 (select .cse126 1)))) (.cse4 (not (= (select |#length| 28) 25))) (.cse6 (not (= 73 (select .cse130 2)))) (.cse7 (not (= (select .cse125 2) 0))) (.cse8 (not (= (select .cse135 0) 48))) (.cse9 (not (= 30 (select |#length| 23)))) (.cse10 (not (= (select .cse136 3) 0))) (.cse11 (not (= |#NULL.offset| 0))) (.cse12 (not (= (select |#valid| 26) 1))) (.cse13 (not (= (select |#length| 4) 13))) (.cse14 (not (= (select .cse131 0) 79))) (.cse15 (not (= (select |#length| 15) 3))) (.cse16 (not (= 31 (select |#length| 2)))) (.cse17 (not (= (select .cse136 1) 102))) (.cse18 (not (= (select |#valid| 12) 1))) (.cse19 (not (= (select .cse136 0) 79))) (.cse20 (not (= (select .cse132 2) 102))) (.cse21 (not (= 2 (select |#length| 1)))) (.cse22 (not (= 30 (select |#length| 26)))) (.cse23 (not (= (select .cse134 0) 79))) (.cse24 (not (= 2 (select |#length| 11)))) (.cse25 (not (= 44 (select .cse126 0)))) (.cse26 (not (= 58 (select .cse128 5)))) (.cse27 (not (= (select .cse136 2) 102))) (.cse28 (not (= 116 (select .cse126 3)))) (.cse29 (not (= 1 ~systemActive~0))) (.cse30 (not (= (select .cse132 3) 0))) (.cse31 (not (= (select |#length| 12) 13))) (.cse32 (not (= (select .cse130 0) 67))) (.cse33 (not (= (select |#valid| 6) 1))) (.cse34 (not (= (select |#length| 8) 3))) (.cse35 (not (= (select .cse129 0) 10))) (.cse36 (not (< 0 |#StackHeapBarrier|))) (.cse37 (not (= (select .cse134 1) 110))) (.cse38 (not (= (select |#valid| 3) 1))) (.cse39 (not (= 30 (select |#length| 20)))) (.cse40 (not (= (select |#valid| 25) 1))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= (select |#valid| 20) 1))) (.cse43 (not (= 25 (select |#length| 25)))) (.cse44 (not (= (select |#valid| 21) 1))) (.cse45 (not (= (select |#valid| 11) 1))) (.cse46 (not (= (select .cse130 4) 0))) (.cse47 (not (= (select |#valid| 16) 1))) (.cse48 (not (= 101 (select .cse126 2)))) (.cse49 (not (= (select |#length| 21) 9))) (.cse50 (not (= (select |#valid| 28) 1))) (.cse51 (not (= (select .cse128 6) 0))) (.cse52 (not (= (select |#valid| 15) 1))) (.cse53 (not (= 1 (select |#valid| 5)))) (.cse54 (not (= (select |#length| 3) 12))) (.cse55 (not (= (select |#valid| 0) 0))) (.cse56 (not (= 109 (select .cse128 3)))) (.cse58 (not (= (select |#valid| 27) 1))) (.cse59 (not (= (select .cse135 1) 0))) (.cse60 (not (= 3 (select |#length| 5)))) (.cse61 (not (= (select |#valid| 24) 1))) (.cse62 (not (= (select .cse128 1) 80))) (.cse63 (not (= (select |#length| 19) 21))) (.cse64 (not (= 5 (select |#length| 14)))) (.cse65 (not (= (select |#valid| 19) 1))) (.cse66 (not (= (select .cse127 0) 41))) (.cse67 (not (= (select |#valid| 1) 1))) (.cse68 (not (= (select |#valid| 22) 1))) (.cse69 (not (= 3 (select |#length| 10)))) (.cse70 (not (= (select .cse134 2) 0))) (.cse71 (not (= 2 (select |#length| 16)))) (.cse72 (not (= 41 (select .cse133 0)))) (.cse73 (not (= (select |#length| 24) 9))) (.cse74 (not (= 112 (select .cse128 4)))) (.cse75 (not (= (select |#valid| 8) 1))) (.cse76 (not (= (select .cse133 1) 0))) (.cse77 (not (= (select |#valid| 4) 1))) (.cse78 (not (= 7 (select |#length| 13)))) (.cse79 (not (= (select .cse125 1) 75))) (.cse80 (not (= |#NULL.base| 0))) (.cse81 (not (= 7 (select |#length| 7)))) (.cse82 (not (= (select .cse131 2) 0))) (.cse83 (not (= (select |#length| 17) 30))) (.cse84 (not (= (select |#valid| 7) 1))) (.cse85 (not (= (select |#valid| 10) 1))) (.cse86 (not (= (select .cse132 0) 79))) (.cse87 (not (= (select |#length| 22) 21))) (.cse88 (not (= (select .cse130 1) 82))) (.cse89 (not (= (select |#valid| 14) 1))) (.cse90 (not (= 110 (select .cse131 1)))) (.cse91 (not (= (select |#valid| 13) 1))) (.cse93 (not (= 58 (select .cse126 5)))) (.cse94 (not (= (select .cse130 3) 84))) (.cse95 (not (= (select |#valid| 2) 1))) (.cse96 (not (= 104 (select .cse126 4)))) (.cse97 (not (= (select |#length| 9) 4))) (.cse98 (not (= 9 (select |#length| 18)))) (.cse99 (not (= (select .cse129 1) 0))) (.cse100 (not (= (select .cse127 2) 0))) (.cse101 (not (= (select |#valid| 17) 1))) (.cse102 (not (= 44 (select .cse128 0)))) (.cse103 (not (= (select |#length| 27) 9))) (.cse104 (not (= 117 (select .cse128 2)))) (.cse105 (not (= (select |#valid| 9) 1))) (.cse106 (not (= 32 (select .cse127 1)))) (.cse107 (not (= ~head~0.base 0))) (.cse108 (not (= ~cleanupTimeShifts~0 4))) (.cse109 (not (= (select |#valid| 18) 1))) (.cse110 (not (= 0 (select .cse126 6)))) (.cse112 (not (= (select .cse125 0) 79))) (.cse118 (or .cse5 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= |old(~waterLevel~0)| ~waterLevel~0)))) (.cse116 (< ~waterLevel~0 2)) (.cse120 (and .cse121 .cse57 .cse119 (or .cse124 (<= 2 ~waterLevel~0)) (not .cse113))) (.cse117 (<= 0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse114 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 (and (= 0 |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (<= |timeShift_isHighWaterLevel_#res#1| 1) (<= 0 |timeShift_isHighWaterLevel_~tmp~4#1|) (<= 1 |timeShift_isHighWaterLevel_~tmp___0~1#1|) (<= 0 |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_activatePump_~tmp~3#1| 0) (<= 1 |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= |timeShift_isMethaneAlarm_~retValue_acc~1#1| 0) (<= |timeShift_isHighWaterSensorDry_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|) (<= |timeShift_isHighWaterLevel_~retValue_acc~3#1| 1) (<= 0 |timeShift_isMethaneAlarm_~retValue_acc~1#1|) (<= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|) (<= 1 |timeShift_isHighWaterLevel_#res#1|) (<= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112) (or .cse5 (and (= |timeShift_processEnvironment_~tmp~2#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse113 .cse92 .cse111) (or .cse5 .cse57 .cse113 .cse92 .cse114 .cse111) (or .cse115 (and (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (and .cse116 .cse117)) .cse118 .cse119) .cse113 .cse120) (or (not (<= |old(~waterLevel~0)| 1)) .cse116 .cse113) (or .cse121 .cse122 .cse57 .cse113) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 (and .cse123 (= |timeShift_processEnvironment_~tmp~2#1| |timeShift_isHighWaterLevel_#res#1|) (= |timeShift_isHighWaterLevel_#res#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= |timeShift_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |timeShift_isHighWaterSensorDry_#res#1| |timeShift_isHighWaterSensorDry_~retValue_acc~6#1|) (= |timeShift_isHighWaterLevel_~tmp~4#1| |timeShift_isHighWaterSensorDry_#res#1|) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| |timeShift_isHighWaterLevel_~retValue_acc~3#1|)) .cse20 .cse21 .cse22 .cse124 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse112) (or .cse121 (and .cse118 .cse116 .cse117) .cse57 .cse113) (or .cse115 .cse122 .cse113 .cse120) (or .cse5 .cse123 .cse124 (and .cse117 (= ~waterLevel~0 1) .cse114) .cse57 .cse113))))) [2022-11-03 03:50:15,459 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 233 256) the Hoare annotation is: (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-03 03:50:15,459 INFO L899 garLoopResultBuilder]: For program point L237-1(lines 236 255) no Hoare annotation was computed. [2022-11-03 03:50:15,459 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 233 256) no Hoare annotation was computed. [2022-11-03 03:50:15,460 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-11-03 03:50:15,460 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-03 03:50:15,460 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-03 03:50:15,460 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-03 03:50:15,460 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-03 03:50:15,461 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-03 03:50:15,461 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-03 03:50:15,461 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-03 03:50:15,461 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-03 03:50:15,461 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-03 03:50:15,462 INFO L895 garLoopResultBuilder]: At program point L213(lines 164 214) the Hoare annotation is: false [2022-11-03 03:50:15,462 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 03:50:15,462 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-11-03 03:50:15,462 INFO L895 garLoopResultBuilder]: At program point L185-1(lines 185 191) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-03 03:50:15,463 INFO L895 garLoopResultBuilder]: At program point L210(lines 165 212) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 (not .cse2) .cse3) (and .cse0 .cse2 .cse1 (<= ~waterLevel~0 1) .cse3) (and .cse0 (not (= ~pumpRunning~0 0)) .cse2 .cse1 .cse3))) [2022-11-03 03:50:15,463 INFO L895 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-03 03:50:15,464 INFO L895 garLoopResultBuilder]: At program point L140(lines 140 147) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 11)) (.cse8 (select |#memory_int| 8)) (.cse9 (select |#memory_int| 16)) (.cse4 (select |#memory_int| 9)) (.cse0 (select |#memory_int| 14)) (.cse5 (select |#memory_int| 7)) (.cse1 (select |#memory_int| 6)) (.cse6 (select |#memory_int| 13)) (.cse10 (select |#memory_int| 1)) (.cse11 (select |#memory_int| 15)) (.cse3 (select |#memory_int| 10)) (.cse7 (select |#memory_int| 5))) (and (= (select .cse0 3) 84) (= (select .cse1 2) 102) (= (select .cse2 1) 0) (= 1 (select |#valid| 5)) (= 32 (select .cse3 1)) (= (select |#length| 3) 12) (= (select .cse4 0) 79) (= (select |#valid| 15) 1) (= 112 (select .cse5 4)) (= (select .cse1 0) 79) (= 3 (select |#length| 10)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= (select .cse5 1) 80) (= 58 (select .cse6 5)) (= (select |#length| 8) 3) (= (select |#length| 6) 4) (= (select |#valid| 9) 1) (= (select |#length| 4) 13) (= 117 (select .cse5 2)) (= (select .cse7 2) 0) (= 7 (select |#length| 7)) (= 7 (select |#length| 13)) (= 110 (select .cse8 1)) (= (select .cse1 1) 102) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse5 5)) (= (select .cse8 0) 79) (= 30 (select |#length| 23)) (= 41 (select .cse9 0)) (= 44 (select .cse5 0)) (= (select |#length| 24) 9) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 44 (select .cse6 0)) (= (select .cse2 0) 10) (= (select .cse0 4) 0) (= 2 (select |#length| 1)) (= (select |#length| 17) 30) (= 73 (select .cse0 2)) (= 9 (select |#length| 18)) (= (select |#length| 19) 21) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= (select |#length| 22) 21) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 3 (select |#length| 5)) (= 30 (select |#length| 26)) (= 77 (select .cse6 1)) (= |ULTIMATE.start_valid_product_~retValue_acc~8#1| 1) (= 2 (select |#length| 11)) (= 1 ~systemActive~0) (= (select |#length| 15) 3) (= (select |#valid| 24) 1) (= (select .cse4 3) 0) (= (select |#valid| 12) 1) (= (select |#valid| 28) 1) (= (select .cse0 1) 82) (= (select |#valid| 4) 1) (= (select .cse4 1) 102) (= (select .cse8 2) 0) (= (select .cse9 1) 0) (= 101 (select .cse6 2)) (= 25 (select |#length| 25)) (= (select |#valid| 1) 1) (= (select .cse5 6) 0) (= (select .cse4 2) 102) (= (select |#valid| 20) 1) (= (select .cse7 0) 79) (= (select |#length| 12) 13) (= 2 (select |#length| 16)) (= (select |#valid| 21) 1) (= (select |#length| 9) 4) (= 104 (select .cse6 4)) (= (select |#length| 21) 9) (= (select |#valid| 14) 1) (= 116 (select .cse6 3)) (= 5 (select |#length| 14)) (= (select |#valid| 0) 0) (= 30 (select |#length| 20)) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= (select .cse0 0) 67) (= ~waterLevel~0 1) (= (select .cse3 2) 0) (= (select |#length| 27) 9) (= (select .cse10 0) 48) (= (select |#valid| 23) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~8#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 19) 1) (= (select .cse11 1) 75) (= 109 (select .cse5 3)) (= (select .cse1 3) 0) (= 0 (select .cse6 6)) (= (select |#valid| 16) 1) (= (select .cse11 2) 0) (= (select |#valid| 6) 1) (= (select .cse10 1) 0) (= (select .cse11 0) 79) (= (select .cse3 0) 41) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse7 1) 110) (= (select |#valid| 8) 1) (= (select |#length| 28) 25) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-03 03:50:15,465 INFO L902 garLoopResultBuilder]: At program point L140-2(lines 140 147) the Hoare annotation is: true [2022-11-03 03:50:15,465 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 03:50:15,465 INFO L895 garLoopResultBuilder]: At program point L203-2(lines 195 208) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-03 03:50:15,466 INFO L899 garLoopResultBuilder]: For program point L166(lines 165 212) no Hoare annotation was computed. [2022-11-03 03:50:15,466 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 1)) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-03 03:50:15,466 INFO L902 garLoopResultBuilder]: At program point L216(lines 155 220) the Hoare annotation is: true [2022-11-03 03:50:15,466 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-11-03 03:50:15,466 INFO L899 garLoopResultBuilder]: For program point L175-1(lines 175 181) no Hoare annotation was computed. [2022-11-03 03:50:15,467 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 423 434) no Hoare annotation was computed. [2022-11-03 03:50:15,467 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 423 434) the Hoare annotation is: (or (= |old(~waterLevel~0)| ~waterLevel~0) (= 0 ~systemActive~0)) [2022-11-03 03:50:15,471 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 03:50:15,474 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 03:50:15,586 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 03:50:15 BoogieIcfgContainer [2022-11-03 03:50:15,590 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 03:50:15,592 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 03:50:15,592 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 03:50:15,592 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 03:50:15,593 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 03:47:14" (3/4) ... [2022-11-03 03:50:15,597 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 03:50:15,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-03 03:50:15,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-03 03:50:15,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-03 03:50:15,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-03 03:50:15,604 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-03 03:50:15,605 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-03 03:50:15,619 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2022-11-03 03:50:15,620 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-03 03:50:15,621 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-03 03:50:15,621 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-03 03:50:15,621 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-03 03:50:15,622 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:50:15,622 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 03:50:15,651 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && retValue_acc == 1) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && retValue_acc == \result) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-03 03:50:15,652 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == 1) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) || ((((tmp == systemActive && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0)) || ((((tmp == systemActive && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) [2022-11-03 03:50:15,653 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive [2022-11-03 03:50:15,653 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((tmp == systemActive && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == 1) && splverifierCounter == 0) || (((tmp == systemActive && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) [2022-11-03 03:50:15,654 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((methaneLevelCritical == 0 || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == 1) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(pumpRunning == 0) || methaneLevelCritical == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && ((!(\old(waterLevel) <= 1) || waterLevel < 2) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) [2022-11-03 03:50:15,654 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((methaneLevelCritical == 0 || ((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)))) || 0 == systemActive) || (!(pumpRunning == 0) && !(\old(waterLevel) == 1)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && ((!(\old(waterLevel) <= 1) || waterLevel <= 1) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || (!(pumpRunning == 0) && !(\old(waterLevel) == 1)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(pumpRunning == 0) || (((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || ((((((((((((((0 == retValue_acc && tmp == \result) && \result <= 1) && 0 <= tmp) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && 1 <= retValue_acc) && retValue_acc <= 0) && \result <= 0) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && 1 <= \result) && tmp <= 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 03:50:15,655 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || ((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && \result <= 0) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && tmp <= 0)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79)) && ((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || (((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && !(tmp == 0))) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && ((!(\old(waterLevel) <= 1) || waterLevel < 2) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(pumpRunning == 0) || (((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-03 03:50:15,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp) || ((!(pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || (((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && !(tmp == 0))) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && (((((!(pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || waterLevel <= 1) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || (((((((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && \result == tmp___0) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && retValue_acc == waterLevel) && \result <= 0) && pumpRunning == tmp___1) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && pumpRunning == 1) && tmp <= 0)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || pumpRunning == tmp___1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || ((((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && waterLevel == 1) && tmp == \result) && tmp___0 == retValue_acc)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) [2022-11-03 03:50:15,656 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && pumpRunning == 0) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) || 0 == systemActive) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (\old(pumpRunning) == 0 || 0 == systemActive)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || ((((((0 <= \result && \result == retValue_acc) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc) && tmp___0 == 1) && tmp <= 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((tmp == 1 || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-03 03:50:15,657 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((tmp == 1 && (!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0)))) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || ((((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && retValue_acc == waterLevel) && \result <= 0) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && tmp <= 0)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (methaneLevelCritical == 0 || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || (tmp___0 <= 1 && waterLevel <= 1)) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(pumpRunning == 0) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0))) && waterLevel <= \old(waterLevel)) && waterLevel < 2) && \old(waterLevel) <= waterLevel) && 0 <= tmp)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0))) && 0 <= tmp) && waterLevel == 1) && pumpRunning == 1)) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) [2022-11-03 03:50:15,685 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 03:50:15,685 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 03:50:15,686 INFO L158 Benchmark]: Toolchain (without parser) took 183289.42ms. Allocated memory was 117.4MB in the beginning and 373.3MB in the end (delta: 255.9MB). Free memory was 77.8MB in the beginning and 178.6MB in the end (delta: -100.8MB). Peak memory consumption was 154.3MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,686 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 117.4MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 03:50:15,687 INFO L158 Benchmark]: CACSL2BoogieTranslator took 673.96ms. Allocated memory is still 117.4MB. Free memory was 77.5MB in the beginning and 84.5MB in the end (delta: -7.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,687 INFO L158 Benchmark]: Boogie Procedure Inliner took 94.42ms. Allocated memory is still 117.4MB. Free memory was 84.5MB in the beginning and 82.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,688 INFO L158 Benchmark]: Boogie Preprocessor took 74.88ms. Allocated memory is still 117.4MB. Free memory was 81.8MB in the beginning and 80.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,688 INFO L158 Benchmark]: RCFGBuilder took 819.63ms. Allocated memory is still 117.4MB. Free memory was 80.4MB in the beginning and 52.1MB in the end (delta: 28.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,688 INFO L158 Benchmark]: TraceAbstraction took 181521.19ms. Allocated memory was 117.4MB in the beginning and 373.3MB in the end (delta: 255.9MB). Free memory was 51.0MB in the beginning and 184.9MB in the end (delta: -133.9MB). Peak memory consumption was 190.3MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,689 INFO L158 Benchmark]: Witness Printer took 93.79ms. Allocated memory is still 373.3MB. Free memory was 184.9MB in the beginning and 178.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-03 03:50:15,691 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 117.4MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 673.96ms. Allocated memory is still 117.4MB. Free memory was 77.5MB in the beginning and 84.5MB in the end (delta: -7.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 94.42ms. Allocated memory is still 117.4MB. Free memory was 84.5MB in the beginning and 82.4MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 74.88ms. Allocated memory is still 117.4MB. Free memory was 81.8MB in the beginning and 80.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 819.63ms. Allocated memory is still 117.4MB. Free memory was 80.4MB in the beginning and 52.1MB in the end (delta: 28.3MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 181521.19ms. Allocated memory was 117.4MB in the beginning and 373.3MB in the end (delta: 255.9MB). Free memory was 51.0MB in the beginning and 184.9MB in the end (delta: -133.9MB). Peak memory consumption was 190.3MB. Max. memory is 16.1GB. * Witness Printer took 93.79ms. Allocated memory is still 373.3MB. Free memory was 184.9MB in the beginning and 178.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 51 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 181.3s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 29.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 113.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 883 SdHoareTripleChecker+Valid, 5.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 848 mSDsluCounter, 2064 SdHoareTripleChecker+Invalid, 4.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1840 mSDsCounter, 327 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2646 IncrementalHoareTripleChecker+Invalid, 2973 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 327 mSolverCounterUnsat, 599 mSDtfsCounter, 2646 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 410 GetRequests, 260 SyntacticMatches, 2 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 987 ImplicationChecksByTransitivity, 49.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=486occurred in iteration=8, InterpolantAutomatonStates: 116, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 13 MinimizatonAttempts, 331 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 31 LocationsWithAnnotation, 1150 PreInvPairs, 1581 NumberOfFragments, 13835 HoareAnnotationTreeSize, 1150 FomulaSimplifications, 2128 FormulaSimplificationTreeSizeReduction, 8.8s HoareSimplificationTime, 31 FomulaSimplificationsInter, 448262 FormulaSimplificationTreeSizeReductionInter, 104.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 4.3s InterpolantComputationTime, 679 NumberOfCodeBlocks, 679 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 691 ConstructedInterpolants, 0 QuantifiedInterpolants, 2008 SizeOfPredicates, 52 NumberOfNonLiveVariables, 1618 ConjunctsInSsa, 101 ConjunctsInUnsatCore, 18 InterpolantComputations, 12 PerfectInterpolantSequences, 157/199 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 4.4s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 4, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 29, DAG_INTERPRETER_EARLY_EXITS: 1, TOOLS_POST_APPLICATIONS: 23, TOOLS_POST_TIME: 1.7s, TOOLS_POST_CALL_APPLICATIONS: 10, TOOLS_POST_CALL_TIME: 1.6s, TOOLS_POST_RETURN_APPLICATIONS: 6, TOOLS_POST_RETURN_TIME: 0.5s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 39, TOOLS_QUANTIFIERELIM_TIME: 3.7s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.3s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 68, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 7, DOMAIN_JOIN_TIME: 0.4s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 0, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 29, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 0, LOOP_SUMMARIZER_CACHE_MISSES: 0, LOOP_SUMMARIZER_OVERALL_TIME: 0.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 0, CALL_SUMMARIZER_APPLICATIONS: 6, CALL_SUMMARIZER_CACHE_MISSES: 2, CALL_SUMMARIZER_OVERALL_TIME: 0.0s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 275, DAG_COMPRESSION_RETAINED_NODES: 78, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || ((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && \result <= 0) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && tmp <= 0)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79)) && ((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || (((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && !(tmp == 0))) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && ((!(\old(waterLevel) <= 1) || waterLevel < 2) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(pumpRunning == 0) || (((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((((((((((((tmp == 1 && (!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0)))) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || ((((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && retValue_acc == waterLevel) && \result <= 0) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && tmp <= 0)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (methaneLevelCritical == 0 || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || (tmp___0 <= 1 && waterLevel <= 1)) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(pumpRunning == 0) || !(methaneLevelCritical == 0)) || (((((!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0))) && waterLevel <= \old(waterLevel)) && waterLevel < 2) && \old(waterLevel) <= waterLevel) && 0 <= tmp)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || ((((!(\old(pumpRunning) == 0) || ((tmp___0 <= 2 || tmp___0 <= \old(waterLevel)) && (!(tmp___0 <= 1) || \old(waterLevel) <= tmp___0))) && 0 <= tmp) && waterLevel == 1) && pumpRunning == 1)) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 0 == systemActive - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp) || ((!(pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || (((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && !(tmp == 0))) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && (((((!(pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || waterLevel <= 1) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || (((((((((((((((((((((0 == retValue_acc && \result <= 1) && 0 <= tmp) && \result == tmp___0) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && tmp == 0) && 1 <= retValue_acc) && retValue_acc == waterLevel) && \result <= 0) && pumpRunning == tmp___1) && retValue_acc <= 0) && \result <= 0) && 0 <= \result) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && methaneLevelCritical == tmp) && 1 <= \result) && pumpRunning == 1) && tmp <= 0)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || pumpRunning == tmp___1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || ((((!(pumpRunning == 0) && !(methaneLevelCritical == 0)) && !(tmp == 0)) && (!(\old(waterLevel) == 1) || 2 <= waterLevel)) && !(0 == systemActive)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || ((((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && waterLevel == 1) && tmp == \result) && tmp___0 == retValue_acc)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && tmp == 1) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && retValue_acc == 1) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && retValue_acc == \result) && \valid[19] == 1) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) || 0 == systemActive - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (tmp == 1 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((methaneLevelCritical == 0 || ((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && (!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)))) || 0 == systemActive) || (!(pumpRunning == 0) && !(\old(waterLevel) == 1)))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && ((!(\old(waterLevel) <= 1) || waterLevel <= 1) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((methaneLevelCritical == 0 || \old(pumpRunning) == 0) || 0 == systemActive) || (!(pumpRunning == 0) && !(\old(waterLevel) == 1)))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || (((((((pumpRunning == 0 && tmp == \result) && \result == retValue_acc) && tmp___0 == 0) && retValue_acc == 1) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((!(pumpRunning == 0) || (((!(\old(pumpRunning) == 0) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) && waterLevel < 2) && 0 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || ((((((((((((((0 == retValue_acc && tmp == \result) && \result <= 1) && 0 <= tmp) && retValue_acc == \result) && 1 <= tmp___0) && 0 <= \result) && 1 <= retValue_acc) && retValue_acc <= 0) && \result <= 0) && retValue_acc <= 1) && 0 <= retValue_acc) && tmp___0 <= 1) && 1 <= \result) && tmp <= 0)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((0 <= tmp && waterLevel == 1) && pumpRunning == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == 1) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) || ((((tmp == systemActive && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0)) || ((((tmp == systemActive && !(pumpRunning == 0)) && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) - InvariantResult [Line: 185]: Loop Invariant Derived loop invariant: (((tmp == systemActive && (!(\old(methaneLevelCritical) == 0) || methaneLevelCritical == 1)) && tmp == 1) && splverifierCounter == 0) || (((tmp == systemActive && methaneLevelCritical == 0) && tmp == 1) && splverifierCounter == 0) - InvariantResult [Line: 269]: Loop Invariant Derived loop invariant: ((((((((((methaneLevelCritical == 0 || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == 1) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(pumpRunning == 0) || methaneLevelCritical == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel))) && ((!(\old(waterLevel) <= 1) || waterLevel < 2) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && (((!(pumpRunning == 0) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(methaneLevelCritical == 0) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || (waterLevel <= \old(waterLevel) && \old(waterLevel) <= waterLevel)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: (((((((((1 <= tmp || (waterLevel < 2 && 0 <= tmp)) && pumpRunning == 0) && aux-isMethaneLevelCritical()-aux == methaneLevelCritical) && waterLevel <= \old(waterLevel)) && \old(waterLevel) <= waterLevel) || 0 == systemActive) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && (\old(pumpRunning) == 0 || 0 == systemActive)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || ((((((0 <= \result && \result == retValue_acc) && \result == retValue_acc) && tmp == \result) && tmp___0 == retValue_acc) && tmp___0 == 1) && tmp <= 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((tmp == 1 || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-03 03:50:15,792 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f36346d9-0362-40d4-8aeb-349a2bca8460/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE