./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 15:57:44,816 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 15:57:44,819 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 15:57:44,865 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 15:57:44,866 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 15:57:44,867 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 15:57:44,875 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 15:57:44,877 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 15:57:44,881 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 15:57:44,882 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 15:57:44,884 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 15:57:44,887 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 15:57:44,888 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 15:57:44,892 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 15:57:44,894 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 15:57:44,897 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 15:57:44,900 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 15:57:44,906 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 15:57:44,908 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 15:57:44,910 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 15:57:44,913 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 15:57:44,918 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 15:57:44,919 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 15:57:44,920 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 15:57:44,923 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 15:57:44,924 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 15:57:44,924 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 15:57:44,925 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 15:57:44,925 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 15:57:44,926 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 15:57:44,926 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 15:57:44,927 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 15:57:44,928 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 15:57:44,929 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 15:57:44,930 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 15:57:44,930 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 15:57:44,939 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 15:57:44,939 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 15:57:44,940 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 15:57:44,941 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 15:57:44,941 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 15:57:44,943 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-16 15:57:44,973 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 15:57:44,973 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 15:57:44,974 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 15:57:44,974 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 15:57:44,975 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 15:57:44,975 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 15:57:44,975 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-16 15:57:44,975 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-16 15:57:44,976 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-16 15:57:44,976 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-16 15:57:44,977 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-16 15:57:44,977 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-16 15:57:44,977 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-16 15:57:44,977 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-16 15:57:44,978 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-16 15:57:44,978 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-16 15:57:44,978 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-16 15:57:44,978 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-16 15:57:44,979 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 15:57:44,979 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 15:57:44,979 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 15:57:44,979 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 15:57:44,980 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 15:57:44,981 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 15:57:44,981 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 15:57:44,981 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 15:57:44,981 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 15:57:44,982 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 15:57:44,982 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 15:57:44,982 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-16 15:57:44,982 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 15:57:44,982 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 15:57:44,983 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-16 15:57:44,983 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 15:57:44,983 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 15:57:44,983 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-16 15:57:44,983 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 [2022-11-16 15:57:45,262 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 15:57:45,284 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 15:57:45,286 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 15:57:45,288 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 15:57:45,288 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 15:57:45,290 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-11-16 15:57:45,374 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/data/5342efdde/f7a2659cbdff4ee3bfcb9d5614c270b9/FLAGb5e1018a7 [2022-11-16 15:57:45,996 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 15:57:45,999 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-11-16 15:57:46,016 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/data/5342efdde/f7a2659cbdff4ee3bfcb9d5614c270b9/FLAGb5e1018a7 [2022-11-16 15:57:46,277 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/data/5342efdde/f7a2659cbdff4ee3bfcb9d5614c270b9 [2022-11-16 15:57:46,280 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 15:57:46,285 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 15:57:46,289 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 15:57:46,289 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 15:57:46,292 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 15:57:46,293 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,294 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6949fd15 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46, skipping insertion in model container [2022-11-16 15:57:46,295 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,303 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 15:57:46,351 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 15:57:46,692 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-11-16 15:57:46,701 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 15:57:46,710 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 15:57:46,789 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-11-16 15:57:46,790 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 15:57:46,806 INFO L208 MainTranslator]: Completed translation [2022-11-16 15:57:46,806 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46 WrapperNode [2022-11-16 15:57:46,806 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 15:57:46,807 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 15:57:46,808 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 15:57:46,808 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 15:57:46,815 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,827 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,853 INFO L138 Inliner]: procedures = 55, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 263 [2022-11-16 15:57:46,853 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 15:57:46,854 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 15:57:46,854 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 15:57:46,855 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 15:57:46,863 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,863 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,866 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,866 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,872 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,877 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,878 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,880 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,882 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 15:57:46,883 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 15:57:46,883 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 15:57:46,883 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 15:57:46,884 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (1/1) ... [2022-11-16 15:57:46,890 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 15:57:46,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 15:57:46,915 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 15:57:46,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 15:57:46,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 15:57:46,978 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 15:57:46,978 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 15:57:46,978 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 15:57:46,978 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 15:57:46,979 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 15:57:46,979 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 15:57:46,979 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 15:57:46,979 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 15:57:46,980 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 15:57:46,980 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 15:57:46,980 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 15:57:46,980 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 15:57:46,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 15:57:46,981 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 15:57:46,981 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 15:57:46,981 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 15:57:46,981 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 15:57:47,095 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 15:57:47,097 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 15:57:47,493 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 15:57:47,631 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 15:57:47,637 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 15:57:47,643 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 03:57:47 BoogieIcfgContainer [2022-11-16 15:57:47,643 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 15:57:47,646 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 15:57:47,646 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 15:57:47,652 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 15:57:47,652 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 03:57:46" (1/3) ... [2022-11-16 15:57:47,653 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560ced50 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 03:57:47, skipping insertion in model container [2022-11-16 15:57:47,653 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 03:57:46" (2/3) ... [2022-11-16 15:57:47,653 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@560ced50 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 03:57:47, skipping insertion in model container [2022-11-16 15:57:47,653 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 03:57:47" (3/3) ... [2022-11-16 15:57:47,655 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product49.cil.c [2022-11-16 15:57:47,681 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 15:57:47,682 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 15:57:47,758 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 15:57:47,765 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5718cd3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 15:57:47,765 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 15:57:47,770 INFO L276 IsEmpty]: Start isEmpty. Operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 15:57:47,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-16 15:57:47,779 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:47,779 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:47,780 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:47,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:47,786 INFO L85 PathProgramCache]: Analyzing trace with hash -2065705897, now seen corresponding path program 1 times [2022-11-16 15:57:47,799 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:47,800 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [61089025] [2022-11-16 15:57:47,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:47,801 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:47,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:48,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:48,104 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:48,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [61089025] [2022-11-16 15:57:48,106 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [61089025] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:48,106 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:48,106 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 15:57:48,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746418136] [2022-11-16 15:57:48,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:48,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 15:57:48,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:48,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 15:57:48,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 15:57:48,152 INFO L87 Difference]: Start difference. First operand has 56 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 44 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:48,261 INFO L93 Difference]: Finished difference Result 110 states and 149 transitions. [2022-11-16 15:57:48,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 15:57:48,264 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2022-11-16 15:57:48,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:48,278 INFO L225 Difference]: With dead ends: 110 [2022-11-16 15:57:48,280 INFO L226 Difference]: Without dead ends: 51 [2022-11-16 15:57:48,285 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 15:57:48,290 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:48,291 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 53 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:57:48,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-16 15:57:48,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-16 15:57:48,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 33 states have (on average 1.3333333333333333) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-16 15:57:48,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 65 transitions. [2022-11-16 15:57:48,355 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 65 transitions. Word has length 17 [2022-11-16 15:57:48,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:48,356 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 65 transitions. [2022-11-16 15:57:48,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,356 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 65 transitions. [2022-11-16 15:57:48,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-16 15:57:48,359 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:48,359 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:48,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 15:57:48,359 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:48,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:48,360 INFO L85 PathProgramCache]: Analyzing trace with hash 404890511, now seen corresponding path program 1 times [2022-11-16 15:57:48,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:48,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592248040] [2022-11-16 15:57:48,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:48,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:48,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:48,494 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:48,495 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:48,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592248040] [2022-11-16 15:57:48,495 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592248040] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:48,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:48,496 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 15:57:48,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1281957837] [2022-11-16 15:57:48,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:48,498 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 15:57:48,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:48,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 15:57:48,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 15:57:48,502 INFO L87 Difference]: Start difference. First operand 51 states and 65 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:48,590 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-11-16 15:57:48,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 15:57:48,593 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2022-11-16 15:57:48,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:48,594 INFO L225 Difference]: With dead ends: 79 [2022-11-16 15:57:48,594 INFO L226 Difference]: Without dead ends: 43 [2022-11-16 15:57:48,595 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 15:57:48,596 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 7 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:48,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 69 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:57:48,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-16 15:57:48,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-16 15:57:48,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 35 states have internal predecessors, (38), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-16 15:57:48,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-16 15:57:48,604 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 18 [2022-11-16 15:57:48,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:48,605 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-16 15:57:48,605 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,605 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-16 15:57:48,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-16 15:57:48,606 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:48,606 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:48,606 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 15:57:48,611 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:48,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:48,612 INFO L85 PathProgramCache]: Analyzing trace with hash 205913269, now seen corresponding path program 1 times [2022-11-16 15:57:48,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:48,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [889837080] [2022-11-16 15:57:48,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:48,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:48,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:48,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:48,784 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:48,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [889837080] [2022-11-16 15:57:48,784 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [889837080] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:48,784 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:48,785 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 15:57:48,785 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651313620] [2022-11-16 15:57:48,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:48,786 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 15:57:48,786 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:48,786 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 15:57:48,787 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 15:57:48,787 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:48,876 INFO L93 Difference]: Finished difference Result 84 states and 107 transitions. [2022-11-16 15:57:48,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 15:57:48,877 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2022-11-16 15:57:48,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:48,879 INFO L225 Difference]: With dead ends: 84 [2022-11-16 15:57:48,879 INFO L226 Difference]: Without dead ends: 43 [2022-11-16 15:57:48,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 15:57:48,881 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 50 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:48,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 49 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:57:48,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-16 15:57:48,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2022-11-16 15:57:48,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 35 states have internal predecessors, (37), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-16 15:57:48,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 53 transitions. [2022-11-16 15:57:48,891 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 53 transitions. Word has length 20 [2022-11-16 15:57:48,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:48,891 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 53 transitions. [2022-11-16 15:57:48,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:48,892 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 53 transitions. [2022-11-16 15:57:48,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-16 15:57:48,893 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:48,893 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:48,893 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 15:57:48,893 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:48,894 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:48,894 INFO L85 PathProgramCache]: Analyzing trace with hash -332421741, now seen corresponding path program 1 times [2022-11-16 15:57:48,894 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:48,895 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1755766221] [2022-11-16 15:57:48,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:48,895 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:48,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:48,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:48,976 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:48,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1755766221] [2022-11-16 15:57:48,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1755766221] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:48,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:48,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 15:57:48,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69186953] [2022-11-16 15:57:48,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:48,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 15:57:48,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:48,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 15:57:48,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 15:57:48,979 INFO L87 Difference]: Start difference. First operand 43 states and 53 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:49,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:49,043 INFO L93 Difference]: Finished difference Result 119 states and 150 transitions. [2022-11-16 15:57:49,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 15:57:49,044 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-16 15:57:49,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:49,046 INFO L225 Difference]: With dead ends: 119 [2022-11-16 15:57:49,046 INFO L226 Difference]: Without dead ends: 78 [2022-11-16 15:57:49,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 15:57:49,048 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 35 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:49,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 87 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 15:57:49,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-16 15:57:49,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2022-11-16 15:57:49,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2745098039215685) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-11-16 15:57:49,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 93 transitions. [2022-11-16 15:57:49,065 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 93 transitions. Word has length 23 [2022-11-16 15:57:49,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:49,065 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 93 transitions. [2022-11-16 15:57:49,065 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 15:57:49,066 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 93 transitions. [2022-11-16 15:57:49,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-16 15:57:49,067 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:49,067 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:49,067 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 15:57:49,067 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:49,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:49,068 INFO L85 PathProgramCache]: Analyzing trace with hash -639380668, now seen corresponding path program 1 times [2022-11-16 15:57:49,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:49,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [930267747] [2022-11-16 15:57:49,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:49,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:49,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:49,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:49,250 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:49,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [930267747] [2022-11-16 15:57:49,251 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [930267747] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:49,251 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:49,251 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 15:57:49,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [472761967] [2022-11-16 15:57:49,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:49,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 15:57:49,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:49,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 15:57:49,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 15:57:49,260 INFO L87 Difference]: Start difference. First operand 76 states and 93 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-16 15:57:49,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:49,375 INFO L93 Difference]: Finished difference Result 152 states and 190 transitions. [2022-11-16 15:57:49,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 15:57:49,378 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 28 [2022-11-16 15:57:49,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:49,384 INFO L225 Difference]: With dead ends: 152 [2022-11-16 15:57:49,387 INFO L226 Difference]: Without dead ends: 78 [2022-11-16 15:57:49,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 15:57:49,393 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 37 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 63 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:49,397 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 140 Invalid, 63 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:57:49,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-16 15:57:49,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2022-11-16 15:57:49,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 51 states have (on average 1.2156862745098038) internal successors, (62), 58 states have internal predecessors, (62), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (15), 12 states have call predecessors, (15), 12 states have call successors, (15) [2022-11-16 15:57:49,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 89 transitions. [2022-11-16 15:57:49,423 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 89 transitions. Word has length 28 [2022-11-16 15:57:49,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:49,424 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 89 transitions. [2022-11-16 15:57:49,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-16 15:57:49,425 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 89 transitions. [2022-11-16 15:57:49,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-16 15:57:49,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:49,428 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:49,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 15:57:49,430 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:49,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:49,430 INFO L85 PathProgramCache]: Analyzing trace with hash 477852333, now seen corresponding path program 1 times [2022-11-16 15:57:49,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:49,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707708629] [2022-11-16 15:57:49,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:49,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:49,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:49,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:49,730 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:49,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707708629] [2022-11-16 15:57:49,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707708629] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:49,730 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:49,731 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 15:57:49,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [185495949] [2022-11-16 15:57:49,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:49,732 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 15:57:49,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:49,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 15:57:49,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-16 15:57:49,734 INFO L87 Difference]: Start difference. First operand 76 states and 89 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 15:57:49,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:49,930 INFO L93 Difference]: Finished difference Result 262 states and 322 transitions. [2022-11-16 15:57:49,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 15:57:49,931 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 31 [2022-11-16 15:57:49,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:49,939 INFO L225 Difference]: With dead ends: 262 [2022-11-16 15:57:49,940 INFO L226 Difference]: Without dead ends: 188 [2022-11-16 15:57:49,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-16 15:57:49,948 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 77 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:49,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 201 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:57:49,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-11-16 15:57:49,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 172. [2022-11-16 15:57:49,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 117 states have (on average 1.1965811965811965) internal successors, (140), 129 states have internal predecessors, (140), 27 states have call successors, (27), 27 states have call predecessors, (27), 27 states have return successors, (35), 27 states have call predecessors, (35), 27 states have call successors, (35) [2022-11-16 15:57:49,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 202 transitions. [2022-11-16 15:57:49,996 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 202 transitions. Word has length 31 [2022-11-16 15:57:49,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:49,996 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 202 transitions. [2022-11-16 15:57:49,997 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 15:57:49,997 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 202 transitions. [2022-11-16 15:57:49,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-16 15:57:49,998 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:49,998 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:49,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 15:57:49,999 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:49,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:49,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1214773112, now seen corresponding path program 1 times [2022-11-16 15:57:50,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:50,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058124676] [2022-11-16 15:57:50,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:50,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:50,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:50,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 15:57:50,378 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:50,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058124676] [2022-11-16 15:57:50,378 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058124676] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:57:50,378 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 15:57:50,379 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-16 15:57:50,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1839523369] [2022-11-16 15:57:50,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:57:50,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-16 15:57:50,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:57:50,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-16 15:57:50,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2022-11-16 15:57:50,381 INFO L87 Difference]: Start difference. First operand 172 states and 202 transitions. Second operand has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-16 15:57:50,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:57:50,923 INFO L93 Difference]: Finished difference Result 405 states and 490 transitions. [2022-11-16 15:57:50,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-16 15:57:50,924 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 34 [2022-11-16 15:57:50,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:57:50,926 INFO L225 Difference]: With dead ends: 405 [2022-11-16 15:57:50,926 INFO L226 Difference]: Without dead ends: 331 [2022-11-16 15:57:50,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-11-16 15:57:50,928 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 317 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 340 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 327 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 473 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 340 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 15:57:50,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [327 Valid, 220 Invalid, 473 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 340 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 15:57:50,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 331 states. [2022-11-16 15:57:50,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 331 to 309. [2022-11-16 15:57:50,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 309 states, 214 states have (on average 1.2149532710280373) internal successors, (260), 234 states have internal predecessors, (260), 48 states have call successors, (48), 44 states have call predecessors, (48), 46 states have return successors, (60), 47 states have call predecessors, (60), 48 states have call successors, (60) [2022-11-16 15:57:50,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 309 states to 309 states and 368 transitions. [2022-11-16 15:57:50,978 INFO L78 Accepts]: Start accepts. Automaton has 309 states and 368 transitions. Word has length 34 [2022-11-16 15:57:50,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:57:50,979 INFO L495 AbstractCegarLoop]: Abstraction has 309 states and 368 transitions. [2022-11-16 15:57:50,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.125) internal successors, (25), 8 states have internal predecessors, (25), 5 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-16 15:57:50,979 INFO L276 IsEmpty]: Start isEmpty. Operand 309 states and 368 transitions. [2022-11-16 15:57:50,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-16 15:57:50,988 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:57:50,988 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:57:50,988 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 15:57:50,989 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:57:50,989 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:57:50,989 INFO L85 PathProgramCache]: Analyzing trace with hash -769394170, now seen corresponding path program 1 times [2022-11-16 15:57:50,990 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:57:50,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1011040900] [2022-11-16 15:57:50,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:50,990 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:57:51,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:51,089 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 15 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 15:57:51,090 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:57:51,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1011040900] [2022-11-16 15:57:51,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1011040900] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 15:57:51,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1198748187] [2022-11-16 15:57:51,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:57:51,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 15:57:51,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 15:57:51,099 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 15:57:51,122 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 15:57:51,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:57:51,224 INFO L263 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-16 15:57:51,231 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 15:57:51,565 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 2 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 15:57:51,565 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 15:57:52,042 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 15:57:52,042 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1198748187] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 15:57:52,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [161031845] [2022-11-16 15:57:52,062 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2022-11-16 15:57:52,063 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 15:57:52,067 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 15:57:52,073 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 15:57:52,074 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 15:57:58,426 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 294 for LOIs [2022-11-16 15:57:58,462 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 299 for LOIs [2022-11-16 15:58:00,796 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 299 for LOIs [2022-11-16 15:58:01,279 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 292 for LOIs [2022-11-16 15:58:01,323 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 15:58:48,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [161031845] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:58:48,766 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-16 15:58:48,766 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [22] imperfect sequences [7, 9, 8] total 40 [2022-11-16 15:58:48,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111382247] [2022-11-16 15:58:48,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:58:48,768 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-16 15:58:48,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:58:48,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-16 15:58:48,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=1327, Unknown=0, NotChecked=0, Total=1560 [2022-11-16 15:58:48,769 INFO L87 Difference]: Start difference. First operand 309 states and 368 transitions. Second operand has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-16 15:59:16,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:59:16,762 INFO L93 Difference]: Finished difference Result 637 states and 764 transitions. [2022-11-16 15:59:16,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-16 15:59:16,765 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 51 [2022-11-16 15:59:16,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:59:16,768 INFO L225 Difference]: With dead ends: 637 [2022-11-16 15:59:16,768 INFO L226 Difference]: Without dead ends: 390 [2022-11-16 15:59:16,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 110 SyntacticMatches, 10 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 697 ImplicationChecksByTransitivity, 71.9s TimeCoverageRelationStatistics Valid=365, Invalid=1987, Unknown=0, NotChecked=0, Total=2352 [2022-11-16 15:59:16,776 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 120 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 980 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 1024 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 980 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-11-16 15:59:16,777 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 409 Invalid, 1024 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 980 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-11-16 15:59:16,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2022-11-16 15:59:16,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 365. [2022-11-16 15:59:16,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 365 states, 254 states have (on average 1.2007874015748032) internal successors, (305), 275 states have internal predecessors, (305), 56 states have call successors, (56), 52 states have call predecessors, (56), 54 states have return successors, (68), 54 states have call predecessors, (68), 56 states have call successors, (68) [2022-11-16 15:59:16,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 429 transitions. [2022-11-16 15:59:16,890 INFO L78 Accepts]: Start accepts. Automaton has 365 states and 429 transitions. Word has length 51 [2022-11-16 15:59:16,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:59:16,891 INFO L495 AbstractCegarLoop]: Abstraction has 365 states and 429 transitions. [2022-11-16 15:59:16,891 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 19 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-16 15:59:16,891 INFO L276 IsEmpty]: Start isEmpty. Operand 365 states and 429 transitions. [2022-11-16 15:59:16,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-16 15:59:16,896 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:59:16,896 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:59:16,902 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 15:59:17,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 15:59:17,102 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:59:17,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:59:17,103 INFO L85 PathProgramCache]: Analyzing trace with hash 1200702525, now seen corresponding path program 1 times [2022-11-16 15:59:17,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:59:17,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2007409487] [2022-11-16 15:59:17,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:59:17,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:59:17,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:59:17,784 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-16 15:59:17,784 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:59:17,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2007409487] [2022-11-16 15:59:17,785 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2007409487] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 15:59:17,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2101207802] [2022-11-16 15:59:17,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:59:17,785 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 15:59:17,785 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 15:59:17,786 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 15:59:17,802 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 15:59:17,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:59:17,899 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-16 15:59:17,902 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 15:59:18,262 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 6 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 15:59:18,262 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 15:59:18,666 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-16 15:59:18,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2101207802] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 15:59:18,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1443866828] [2022-11-16 15:59:18,669 INFO L159 IcfgInterpreter]: Started Sifa with 35 locations of interest [2022-11-16 15:59:18,669 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 15:59:18,670 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 15:59:18,670 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 15:59:18,670 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 15:59:26,047 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 319 for LOIs [2022-11-16 15:59:26,106 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 28 for LOIs [2022-11-16 15:59:26,263 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 24 for LOIs [2022-11-16 15:59:26,279 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneLevelCritical with input of size 41 for LOIs [2022-11-16 15:59:26,284 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 15:59:36,949 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5480#(and (<= 0 |old(~pumpRunning~0)|) (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (<= |old(~pumpRunning~0)| 1) (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (= ~head~0.offset 0) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (= 2 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1|) (<= ~methaneLevelCritical~0 0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~5#1| 0) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (<= ~head~0.base 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___1~1#1|) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-16 15:59:36,949 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 15:59:36,949 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 15:59:36,949 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 11] total 30 [2022-11-16 15:59:36,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749207586] [2022-11-16 15:59:36,950 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 15:59:36,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-16 15:59:36,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:59:36,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-16 15:59:36,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=382, Invalid=2698, Unknown=0, NotChecked=0, Total=3080 [2022-11-16 15:59:36,952 INFO L87 Difference]: Start difference. First operand 365 states and 429 transitions. Second operand has 30 states, 28 states have (on average 3.6785714285714284) internal successors, (103), 28 states have internal predecessors, (103), 12 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) [2022-11-16 15:59:42,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:59:42,131 INFO L93 Difference]: Finished difference Result 1268 states and 1592 transitions. [2022-11-16 15:59:42,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-11-16 15:59:42,132 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 28 states have (on average 3.6785714285714284) internal successors, (103), 28 states have internal predecessors, (103), 12 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) Word has length 52 [2022-11-16 15:59:42,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:59:42,138 INFO L225 Difference]: With dead ends: 1268 [2022-11-16 15:59:42,138 INFO L226 Difference]: Without dead ends: 1091 [2022-11-16 15:59:42,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 125 SyntacticMatches, 3 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4540 ImplicationChecksByTransitivity, 13.7s TimeCoverageRelationStatistics Valid=1921, Invalid=11419, Unknown=0, NotChecked=0, Total=13340 [2022-11-16 15:59:42,143 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 1808 mSDsluCounter, 861 mSDsCounter, 0 mSdLazyCounter, 2611 mSolverCounterSat, 1320 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1815 SdHoareTripleChecker+Valid, 989 SdHoareTripleChecker+Invalid, 3931 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1320 IncrementalHoareTripleChecker+Valid, 2611 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-16 15:59:42,144 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1815 Valid, 989 Invalid, 3931 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1320 Valid, 2611 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-16 15:59:42,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1091 states. [2022-11-16 15:59:42,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1091 to 865. [2022-11-16 15:59:42,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 865 states, 600 states have (on average 1.1766666666666667) internal successors, (706), 648 states have internal predecessors, (706), 130 states have call successors, (130), 111 states have call predecessors, (130), 134 states have return successors, (180), 133 states have call predecessors, (180), 130 states have call successors, (180) [2022-11-16 15:59:42,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 865 states to 865 states and 1016 transitions. [2022-11-16 15:59:42,315 INFO L78 Accepts]: Start accepts. Automaton has 865 states and 1016 transitions. Word has length 52 [2022-11-16 15:59:42,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:59:42,316 INFO L495 AbstractCegarLoop]: Abstraction has 865 states and 1016 transitions. [2022-11-16 15:59:42,316 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 28 states have (on average 3.6785714285714284) internal successors, (103), 28 states have internal predecessors, (103), 12 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) [2022-11-16 15:59:42,316 INFO L276 IsEmpty]: Start isEmpty. Operand 865 states and 1016 transitions. [2022-11-16 15:59:42,319 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2022-11-16 15:59:42,319 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 15:59:42,319 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 15:59:42,327 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-16 15:59:42,525 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 15:59:42,525 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 15:59:42,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 15:59:42,526 INFO L85 PathProgramCache]: Analyzing trace with hash -188136884, now seen corresponding path program 1 times [2022-11-16 15:59:42,526 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 15:59:42,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747003610] [2022-11-16 15:59:42,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:59:42,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 15:59:42,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:59:42,664 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 15:59:42,664 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 15:59:42,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747003610] [2022-11-16 15:59:42,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747003610] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 15:59:42,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1513064008] [2022-11-16 15:59:42,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 15:59:42,665 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 15:59:42,665 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 15:59:42,666 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 15:59:42,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 15:59:42,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 15:59:42,789 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-16 15:59:42,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 15:59:42,891 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-11-16 15:59:42,891 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 15:59:42,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1513064008] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 15:59:42,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 15:59:42,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2022-11-16 15:59:42,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1525188173] [2022-11-16 15:59:42,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 15:59:42,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 15:59:42,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 15:59:42,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 15:59:42,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-11-16 15:59:42,894 INFO L87 Difference]: Start difference. First operand 865 states and 1016 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 15:59:43,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 15:59:43,182 INFO L93 Difference]: Finished difference Result 1551 states and 1845 transitions. [2022-11-16 15:59:43,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 15:59:43,182 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 84 [2022-11-16 15:59:43,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 15:59:43,184 INFO L225 Difference]: With dead ends: 1551 [2022-11-16 15:59:43,184 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 15:59:43,187 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=107, Unknown=0, NotChecked=0, Total=132 [2022-11-16 15:59:43,187 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 40 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 15:59:43,188 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 157 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 15:59:43,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 15:59:43,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 15:59:43,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 15:59:43,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 15:59:43,189 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2022-11-16 15:59:43,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 15:59:43,190 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 15:59:43,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 15:59:43,190 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 15:59:43,190 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 15:59:43,193 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 15:59:43,204 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 15:59:43,399 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-16 15:59:43,401 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 15:59:54,618 WARN L233 SmtUtils]: Spent 7.43s on a formula simplification. DAG size of input: 487 DAG size of output: 443 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-16 16:00:08,159 WARN L233 SmtUtils]: Spent 7.80s on a formula simplification. DAG size of input: 530 DAG size of output: 452 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-16 16:00:20,508 WARN L233 SmtUtils]: Spent 7.81s on a formula simplification. DAG size of input: 513 DAG size of output: 452 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-16 16:00:45,865 WARN L233 SmtUtils]: Spent 9.33s on a formula simplification. DAG size of input: 649 DAG size of output: 454 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-11-16 16:00:45,871 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 88 94) no Hoare annotation was computed. [2022-11-16 16:00:45,871 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 88 94) the Hoare annotation is: true [2022-11-16 16:00:45,871 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 388 399) the Hoare annotation is: true [2022-11-16 16:00:45,872 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 388 399) no Hoare annotation was computed. [2022-11-16 16:00:45,872 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 870 899) no Hoare annotation was computed. [2022-11-16 16:00:45,872 INFO L902 garLoopResultBuilder]: At program point L895(lines 870 899) the Hoare annotation is: true [2022-11-16 16:00:45,872 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 870 899) the Hoare annotation is: true [2022-11-16 16:00:45,872 INFO L899 garLoopResultBuilder]: For program point L891(line 891) no Hoare annotation was computed. [2022-11-16 16:00:45,872 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 888) no Hoare annotation was computed. [2022-11-16 16:00:45,873 INFO L902 garLoopResultBuilder]: At program point L884-1(lines 884 888) the Hoare annotation is: true [2022-11-16 16:00:45,873 INFO L902 garLoopResultBuilder]: At program point L880-2(lines 880 894) the Hoare annotation is: true [2022-11-16 16:00:45,873 INFO L902 garLoopResultBuilder]: At program point L876(line 876) the Hoare annotation is: true [2022-11-16 16:00:45,873 INFO L899 garLoopResultBuilder]: For program point L876-1(line 876) no Hoare annotation was computed. [2022-11-16 16:00:45,873 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 400 408) the Hoare annotation is: true [2022-11-16 16:00:45,873 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 400 408) no Hoare annotation was computed. [2022-11-16 16:00:45,874 INFO L895 garLoopResultBuilder]: At program point L126(lines 126 143) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and (<= ~waterLevel~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse3) (or (and (= ~waterLevel~0 1) .cse2) .cse0 .cse1 .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-16 16:00:45,876 INFO L895 garLoopResultBuilder]: At program point L337(lines 337 357) the Hoare annotation is: (let ((.cse132 (select |#memory_int| 16)) (.cse126 (select |#memory_int| 10)) (.cse128 (select |#memory_int| 11)) (.cse127 (select |#memory_int| 7)) (.cse133 (select |#memory_int| 5)) (.cse130 (select |#memory_int| 8)) (.cse135 (select |#memory_int| 9)) (.cse134 (select |#memory_int| 1)) (.cse124 (select |#memory_int| 15)) (.cse129 (select |#memory_int| 14)) (.cse125 (select |#memory_int| 13)) (.cse131 (select |#memory_int| 6)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse34 (not (= |old(~waterLevel~0)| 1))) (.cse6 (or .cse2 (= ~waterLevel~0 1))) (.cse12 (not (= (select .cse131 1) 102))) (.cse13 (not (= (select |#length| 6) 4))) (.cse14 (not (= (select |#valid| 23) 1))) (.cse15 (not (= 77 (select .cse125 1)))) (.cse16 (not (= (select |#length| 28) 25))) (.cse17 (not (= 73 (select .cse129 2)))) (.cse18 (not (= (select .cse124 2) 0))) (.cse19 (not (= (select .cse134 0) 48))) (.cse20 (not (= 30 (select |#length| 23)))) (.cse21 (not (= (select .cse135 3) 0))) (.cse22 (not (= |#NULL.offset| 0))) (.cse23 (not (= (select |#valid| 26) 1))) (.cse24 (not (= (select |#length| 4) 13))) (.cse25 (not (= (select .cse130 0) 79))) (.cse26 (not (= (select |#length| 15) 3))) (.cse27 (not (= 31 (select |#length| 2)))) (.cse28 (not (= (select .cse135 1) 102))) (.cse29 (not (= (select |#valid| 12) 1))) (.cse30 (not (= (select .cse135 0) 79))) (.cse31 (not (= (select .cse131 2) 102))) (.cse32 (not (= 2 (select |#length| 1)))) (.cse33 (not (= 30 (select |#length| 26)))) (.cse35 (not (= (select .cse133 0) 79))) (.cse36 (not (= 2 (select |#length| 11)))) (.cse37 (not (= 44 (select .cse125 0)))) (.cse38 (not (= 58 (select .cse127 5)))) (.cse39 (not (= (select .cse135 2) 102))) (.cse40 (not (= 116 (select .cse125 3)))) (.cse41 (not (= 1 ~systemActive~0))) (.cse42 (not (= (select .cse131 3) 0))) (.cse43 (not (= (select |#length| 12) 13))) (.cse44 (not (= (select .cse129 0) 67))) (.cse45 (not (= (select |#valid| 6) 1))) (.cse46 (not (= (select |#length| 8) 3))) (.cse47 (not (= (select .cse128 0) 10))) (.cse48 (not (< 0 |#StackHeapBarrier|))) (.cse49 (not (= (select .cse133 1) 110))) (.cse50 (not (= (select |#valid| 3) 1))) (.cse51 (not (= 30 (select |#length| 20)))) (.cse52 (not (= (select |#valid| 25) 1))) (.cse53 (not (= ~head~0.offset 0))) (.cse54 (not (= (select |#valid| 20) 1))) (.cse55 (not (= 25 (select |#length| 25)))) (.cse56 (not (= (select |#valid| 21) 1))) (.cse57 (not (= (select |#valid| 11) 1))) (.cse58 (not (= (select .cse129 4) 0))) (.cse59 (not (= (select |#valid| 16) 1))) (.cse60 (not (= 101 (select .cse125 2)))) (.cse61 (not (= (select |#length| 21) 9))) (.cse62 (not (= (select |#valid| 28) 1))) (.cse63 (not (= (select .cse127 6) 0))) (.cse64 (not (= (select |#valid| 15) 1))) (.cse65 (not (= 1 (select |#valid| 5)))) (.cse66 (not (= (select |#length| 3) 12))) (.cse67 (not (= (select |#valid| 0) 0))) (.cse68 (not (= 109 (select .cse127 3)))) (.cse69 (not (= ~methaneLevelCritical~0 0))) (.cse70 (not (= (select |#valid| 27) 1))) (.cse71 (not (= (select .cse134 1) 0))) (.cse72 (not (= 3 (select |#length| 5)))) (.cse73 (not (= (select |#valid| 24) 1))) (.cse74 (not (= (select .cse127 1) 80))) (.cse75 (not (= (select |#length| 19) 21))) (.cse76 (not (= 5 (select |#length| 14)))) (.cse77 (not (= (select |#valid| 19) 1))) (.cse78 (not (= (select .cse126 0) 41))) (.cse79 (not (= (select |#valid| 1) 1))) (.cse80 (not (= (select |#valid| 22) 1))) (.cse81 (not (= 3 (select |#length| 10)))) (.cse82 (not (= (select .cse133 2) 0))) (.cse83 (not (= 2 (select |#length| 16)))) (.cse84 (not (= 41 (select .cse132 0)))) (.cse85 (not (= (select |#length| 24) 9))) (.cse86 (not (= 112 (select .cse127 4)))) (.cse87 (not (= (select |#valid| 8) 1))) (.cse88 (not (= (select .cse132 1) 0))) (.cse89 (not (= (select |#valid| 4) 1))) (.cse90 (not (= 7 (select |#length| 13)))) (.cse91 (not (= (select .cse124 1) 75))) (.cse92 (not (= |#NULL.base| 0))) (.cse93 (not (= 7 (select |#length| 7)))) (.cse94 (not (= (select .cse130 2) 0))) (.cse95 (not (= (select |#length| 17) 30))) (.cse96 (not (= (select |#valid| 7) 1))) (.cse97 (not (= (select |#valid| 10) 1))) (.cse98 (not (= (select .cse131 0) 79))) (.cse99 (not (= (select |#length| 22) 21))) (.cse100 (not (= (select .cse129 1) 82))) (.cse101 (not (= (select |#valid| 14) 1))) (.cse102 (not (= 110 (select .cse130 1)))) (.cse103 (not (= (select |#valid| 13) 1))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse104 (not (= 58 (select .cse125 5)))) (.cse105 (not (= (select .cse129 3) 84))) (.cse106 (not (= (select |#valid| 2) 1))) (.cse107 (not (= 104 (select .cse125 4)))) (.cse108 (not (= (select |#length| 9) 4))) (.cse109 (not (= 9 (select |#length| 18)))) (.cse110 (not (= (select .cse128 1) 0))) (.cse111 (not (= (select .cse126 2) 0))) (.cse112 (not (= (select |#valid| 17) 1))) (.cse113 (not (= 44 (select .cse127 0)))) (.cse114 (not (= (select |#length| 27) 9))) (.cse115 (not (= 117 (select .cse127 2)))) (.cse116 (not (= (select |#valid| 9) 1))) (.cse117 (not (= 32 (select .cse126 1)))) (.cse118 (not (= ~head~0.base 0))) (.cse119 (not (= ~cleanupTimeShifts~0 4))) (.cse120 (not (= (select |#valid| 18) 1))) (.cse121 (not (= 0 (select .cse125 6)))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse122 (not (= (select .cse124 0) 79))) (.cse5 (<= ~waterLevel~0 1)) (.cse4 (= ~pumpRunning~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= |old(~waterLevel~0)| 0)) (and .cse2 .cse4)) (or (and .cse5 .cse6 .cse4) .cse7 (and .cse1 .cse5 .cse6) .cse3 .cse8 .cse9) (let ((.cse10 (<= ~waterLevel~0 0)) (.cse11 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 (and .cse1 .cse10 .cse11) .cse3 (and .cse10 .cse11 .cse4))) (or .cse12 .cse13 .cse14 .cse15 .cse16 .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse1 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122) (or .cse0 .cse1 .cse34 (and .cse6 .cse4) .cse3) (or .cse12 .cse13 .cse14 .cse15 .cse16 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~5#1|) .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse8 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse9 .cse122) (let ((.cse123 (or .cse0 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (or (and .cse5 .cse123) .cse0 (and (< ~waterLevel~0 3) .cse4 .cse123) .cse3 (not (< |old(~waterLevel~0)| 3))))))) [2022-11-16 16:00:45,877 INFO L895 garLoopResultBuilder]: At program point L969(line 969) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (< |old(~waterLevel~0)| 3))) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (not (<= |old(~waterLevel~0)| 2))))) [2022-11-16 16:00:45,877 INFO L895 garLoopResultBuilder]: At program point L136(line 136) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and (<= ~waterLevel~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (< |old(~waterLevel~0)| 3))) (or (and (= ~waterLevel~0 1) .cse2) .cse0 .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-16 16:00:45,877 INFO L899 garLoopResultBuilder]: For program point L347(lines 347 353) no Hoare annotation was computed. [2022-11-16 16:00:45,879 INFO L895 garLoopResultBuilder]: At program point L343(lines 343 356) the Hoare annotation is: (let ((.cse132 (select |#memory_int| 16)) (.cse126 (select |#memory_int| 10)) (.cse128 (select |#memory_int| 11)) (.cse127 (select |#memory_int| 7)) (.cse133 (select |#memory_int| 5)) (.cse130 (select |#memory_int| 8)) (.cse135 (select |#memory_int| 9)) (.cse134 (select |#memory_int| 1)) (.cse124 (select |#memory_int| 15)) (.cse129 (select |#memory_int| 14)) (.cse125 (select |#memory_int| 13)) (.cse131 (select |#memory_int| 6))) (let ((.cse0 (not (= (select .cse131 1) 102))) (.cse1 (not (= (select |#length| 6) 4))) (.cse2 (not (= (select |#valid| 23) 1))) (.cse3 (not (= 77 (select .cse125 1)))) (.cse4 (not (= (select |#length| 28) 25))) (.cse6 (not (= 73 (select .cse129 2)))) (.cse7 (not (= (select .cse124 2) 0))) (.cse8 (not (= (select .cse134 0) 48))) (.cse9 (not (= 30 (select |#length| 23)))) (.cse10 (not (= (select .cse135 3) 0))) (.cse12 (not (= |#NULL.offset| 0))) (.cse13 (not (= (select |#valid| 26) 1))) (.cse14 (not (= (select |#length| 4) 13))) (.cse15 (not (= (select .cse130 0) 79))) (.cse16 (not (= (select |#length| 15) 3))) (.cse17 (not (= 31 (select |#length| 2)))) (.cse18 (not (= (select .cse135 1) 102))) (.cse19 (not (= (select |#valid| 12) 1))) (.cse20 (not (= (select .cse135 0) 79))) (.cse21 (not (= (select .cse131 2) 102))) (.cse22 (not (= 2 (select |#length| 1)))) (.cse23 (not (= 30 (select |#length| 26)))) (.cse24 (not (= (select .cse133 0) 79))) (.cse25 (not (= 2 (select |#length| 11)))) (.cse26 (not (= 44 (select .cse125 0)))) (.cse27 (not (= 58 (select .cse127 5)))) (.cse28 (not (= (select .cse135 2) 102))) (.cse29 (not (= 116 (select .cse125 3)))) (.cse30 (not (= 1 ~systemActive~0))) (.cse31 (not (= (select .cse131 3) 0))) (.cse32 (not (= (select |#length| 12) 13))) (.cse33 (not (= (select .cse129 0) 67))) (.cse34 (not (= (select |#valid| 6) 1))) (.cse35 (not (= (select |#length| 8) 3))) (.cse36 (not (= (select .cse128 0) 10))) (.cse37 (not (< 0 |#StackHeapBarrier|))) (.cse38 (not (= (select .cse133 1) 110))) (.cse39 (not (= (select |#valid| 3) 1))) (.cse40 (not (= 30 (select |#length| 20)))) (.cse41 (not (= (select |#valid| 25) 1))) (.cse42 (not (= ~head~0.offset 0))) (.cse43 (not (= (select |#valid| 20) 1))) (.cse44 (not (= 25 (select |#length| 25)))) (.cse45 (not (= (select |#valid| 21) 1))) (.cse46 (not (= (select |#valid| 11) 1))) (.cse47 (not (= (select .cse129 4) 0))) (.cse48 (not (= (select |#valid| 16) 1))) (.cse49 (not (= 101 (select .cse125 2)))) (.cse50 (not (= (select |#length| 21) 9))) (.cse51 (not (= (select |#valid| 28) 1))) (.cse52 (not (= (select .cse127 6) 0))) (.cse53 (not (= (select |#valid| 15) 1))) (.cse54 (not (= 1 (select |#valid| 5)))) (.cse55 (not (= (select |#length| 3) 12))) (.cse56 (not (= (select |#valid| 0) 0))) (.cse57 (not (= 109 (select .cse127 3)))) (.cse58 (not (= ~methaneLevelCritical~0 0))) (.cse59 (not (= (select |#valid| 27) 1))) (.cse60 (not (= (select .cse134 1) 0))) (.cse61 (not (= 3 (select |#length| 5)))) (.cse62 (not (= (select |#valid| 24) 1))) (.cse63 (not (= (select .cse127 1) 80))) (.cse64 (not (= (select |#length| 19) 21))) (.cse65 (not (= 5 (select |#length| 14)))) (.cse66 (not (= (select |#valid| 19) 1))) (.cse67 (not (= (select .cse126 0) 41))) (.cse68 (not (= (select |#valid| 1) 1))) (.cse69 (not (= (select |#valid| 22) 1))) (.cse70 (not (= 3 (select |#length| 10)))) (.cse71 (not (= (select .cse133 2) 0))) (.cse72 (not (= 2 (select |#length| 16)))) (.cse73 (not (= 41 (select .cse132 0)))) (.cse74 (not (= (select |#length| 24) 9))) (.cse75 (not (= 112 (select .cse127 4)))) (.cse76 (not (= (select |#valid| 8) 1))) (.cse77 (not (= (select .cse132 1) 0))) (.cse78 (not (= (select |#valid| 4) 1))) (.cse79 (not (= 7 (select |#length| 13)))) (.cse80 (not (= (select .cse124 1) 75))) (.cse81 (not (= |#NULL.base| 0))) (.cse82 (not (= 7 (select |#length| 7)))) (.cse83 (not (= (select .cse130 2) 0))) (.cse84 (not (= (select |#length| 17) 30))) (.cse85 (not (= (select |#valid| 7) 1))) (.cse86 (not (= (select |#valid| 10) 1))) (.cse87 (not (= (select .cse131 0) 79))) (.cse88 (not (= (select |#length| 22) 21))) (.cse89 (not (= (select .cse129 1) 82))) (.cse90 (not (= (select |#valid| 14) 1))) (.cse91 (not (= 110 (select .cse130 1)))) (.cse92 (not (= (select |#valid| 13) 1))) (.cse93 (not (= 58 (select .cse125 5)))) (.cse94 (not (= (select .cse129 3) 84))) (.cse95 (not (= (select |#valid| 2) 1))) (.cse96 (not (= 104 (select .cse125 4)))) (.cse97 (not (= (select |#length| 9) 4))) (.cse98 (not (= 9 (select |#length| 18)))) (.cse99 (not (= (select .cse128 1) 0))) (.cse100 (not (= (select .cse126 2) 0))) (.cse101 (not (= (select |#valid| 17) 1))) (.cse102 (not (= 44 (select .cse127 0)))) (.cse103 (not (= (select |#length| 27) 9))) (.cse104 (not (= 117 (select .cse127 2)))) (.cse105 (not (= (select |#valid| 9) 1))) (.cse106 (not (= 32 (select .cse126 1)))) (.cse107 (not (= ~head~0.base 0))) (.cse108 (not (= ~cleanupTimeShifts~0 4))) (.cse109 (not (= (select |#valid| 18) 1))) (.cse110 (not (= 0 (select .cse125 6)))) (.cse111 (not (= (select .cse124 0) 79))) (.cse11 (= ~pumpRunning~0 0)) (.cse113 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse121 (not (= |old(~pumpRunning~0)| 1))) (.cse112 (= ~waterLevel~0 |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1|)) (.cse122 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse116 (= ~pumpRunning~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse115 (= 0 ~systemActive~0)) (.cse117 (not (<= |old(~waterLevel~0)| 2))) (.cse118 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 (not (= |old(~waterLevel~0)| 1)) .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111) (let ((.cse114 (or .cse5 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (or .cse5 (and .cse11 .cse112 .cse113 .cse114) (not (< |old(~waterLevel~0)| 2)) .cse115 (and .cse112 .cse113 .cse116 .cse114))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse117 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 (and (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~5#1| 0)) .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse118 .cse111) (let ((.cse119 (<= ~waterLevel~0 1)) (.cse120 (or .cse122 (= ~waterLevel~0 1)))) (or (and .cse119 .cse112 .cse120 .cse116) .cse121 .cse115 .cse117 (and .cse11 .cse119 .cse112 .cse120) .cse118)) (let ((.cse123 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1| 0))) (or (and .cse112 .cse123 .cse113 .cse116) (not (<= |old(~waterLevel~0)| 1)) (and .cse11 .cse112 .cse123 .cse113) .cse121 .cse115)) (or (and .cse112 .cse122 .cse116) .cse5 .cse115 .cse117 .cse118)))) [2022-11-16 16:00:45,881 INFO L895 garLoopResultBuilder]: At program point L343-1(lines 328 360) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse132 (select |#memory_int| 16)) (.cse126 (select |#memory_int| 10)) (.cse128 (select |#memory_int| 11)) (.cse127 (select |#memory_int| 7)) (.cse133 (select |#memory_int| 5)) (.cse130 (select |#memory_int| 8)) (.cse135 (select |#memory_int| 9)) (.cse134 (select |#memory_int| 1)) (.cse124 (select |#memory_int| 15)) (.cse129 (select |#memory_int| 14)) (.cse125 (select |#memory_int| 13)) (.cse131 (select |#memory_int| 6))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (= (select .cse131 1) 102))) (.cse10 (not (= (select |#length| 6) 4))) (.cse11 (not (= (select |#valid| 23) 1))) (.cse12 (not (= 77 (select .cse125 1)))) (.cse13 (not (= (select |#length| 28) 25))) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= 73 (select .cse129 2)))) (.cse16 (not (= (select .cse124 2) 0))) (.cse17 (not (= (select .cse134 0) 48))) (.cse18 (not (= 30 (select |#length| 23)))) (.cse19 (not (= (select .cse135 3) 0))) (.cse20 (not (= |#NULL.offset| 0))) (.cse21 (not (= (select |#valid| 26) 1))) (.cse22 (not (= (select |#length| 4) 13))) (.cse23 (not (= (select .cse130 0) 79))) (.cse24 (not (= (select |#length| 15) 3))) (.cse25 (not (= 31 (select |#length| 2)))) (.cse26 (not (= (select .cse135 1) 102))) (.cse27 (not (= (select |#valid| 12) 1))) (.cse28 (not (= (select .cse135 0) 79))) (.cse29 (not (= (select .cse131 2) 102))) (.cse30 (not (= 2 (select |#length| 1)))) (.cse31 (not (= 30 (select |#length| 26)))) (.cse32 (not (= (select .cse133 0) 79))) (.cse33 (not (= 2 (select |#length| 11)))) (.cse34 (not (= 44 (select .cse125 0)))) (.cse35 (not (= 58 (select .cse127 5)))) (.cse36 (not (= (select .cse135 2) 102))) (.cse37 (not (= 116 (select .cse125 3)))) (.cse38 (not (= 1 ~systemActive~0))) (.cse39 (not (= (select .cse131 3) 0))) (.cse40 (not (= (select |#length| 12) 13))) (.cse41 (not (= (select .cse129 0) 67))) (.cse42 (not (= (select |#valid| 6) 1))) (.cse43 (not (= (select |#length| 8) 3))) (.cse44 (not (= (select .cse128 0) 10))) (.cse45 (not (< 0 |#StackHeapBarrier|))) (.cse46 (not (= (select .cse133 1) 110))) (.cse47 (not (= (select |#valid| 3) 1))) (.cse48 (not (= 30 (select |#length| 20)))) (.cse49 (not (= (select |#valid| 25) 1))) (.cse50 (not (= ~head~0.offset 0))) (.cse51 (not (= (select |#valid| 20) 1))) (.cse52 (not (= 25 (select |#length| 25)))) (.cse53 (not (= (select |#valid| 21) 1))) (.cse54 (not (= (select |#valid| 11) 1))) (.cse55 (not (= (select .cse129 4) 0))) (.cse56 (not (= (select |#valid| 16) 1))) (.cse57 (not (= 101 (select .cse125 2)))) (.cse58 (not (= (select |#length| 21) 9))) (.cse59 (not (= (select |#valid| 28) 1))) (.cse60 (not (= (select .cse127 6) 0))) (.cse61 (not (= (select |#valid| 15) 1))) (.cse62 (not (= 1 (select |#valid| 5)))) (.cse63 (not (= (select |#length| 3) 12))) (.cse64 (not (= (select |#valid| 0) 0))) (.cse65 (not (= 109 (select .cse127 3)))) (.cse66 (not (= ~methaneLevelCritical~0 0))) (.cse67 (not (= (select |#valid| 27) 1))) (.cse68 (not (= (select .cse134 1) 0))) (.cse69 (not (= 3 (select |#length| 5)))) (.cse70 (not (= (select |#valid| 24) 1))) (.cse71 (not (= (select .cse127 1) 80))) (.cse72 (not (= (select |#length| 19) 21))) (.cse73 (not (= 5 (select |#length| 14)))) (.cse74 (not (= (select |#valid| 19) 1))) (.cse75 (not (= (select .cse126 0) 41))) (.cse76 (not (= (select |#valid| 1) 1))) (.cse77 (not (= (select |#valid| 22) 1))) (.cse78 (not (= 3 (select |#length| 10)))) (.cse79 (not (= (select .cse133 2) 0))) (.cse80 (not (= 2 (select |#length| 16)))) (.cse81 (not (= 41 (select .cse132 0)))) (.cse82 (not (= (select |#length| 24) 9))) (.cse84 (not (= 112 (select .cse127 4)))) (.cse85 (not (= (select |#valid| 8) 1))) (.cse86 (not (= (select .cse132 1) 0))) (.cse87 (not (= (select |#valid| 4) 1))) (.cse88 (not (= 7 (select |#length| 13)))) (.cse89 (not (= (select .cse124 1) 75))) (.cse90 (not (= |#NULL.base| 0))) (.cse91 (not (= 7 (select |#length| 7)))) (.cse92 (not (= (select .cse130 2) 0))) (.cse93 (not (= (select |#length| 17) 30))) (.cse94 (not (= (select |#valid| 7) 1))) (.cse95 (not (= (select |#valid| 10) 1))) (.cse96 (not (= (select .cse131 0) 79))) (.cse97 (not (= (select |#length| 22) 21))) (.cse98 (not (= (select .cse129 1) 82))) (.cse99 (not (= (select |#valid| 14) 1))) (.cse100 (not (= 110 (select .cse130 1)))) (.cse101 (not (= (select |#valid| 13) 1))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse102 (not (= 58 (select .cse125 5)))) (.cse103 (not (= (select .cse129 3) 84))) (.cse104 (not (= (select |#valid| 2) 1))) (.cse105 (not (= 104 (select .cse125 4)))) (.cse106 (not (= (select |#length| 9) 4))) (.cse107 (not (= 9 (select |#length| 18)))) (.cse108 (not (= (select .cse128 1) 0))) (.cse109 (not (= (select .cse126 2) 0))) (.cse110 (not (= (select |#valid| 17) 1))) (.cse111 (not (= 44 (select .cse127 0)))) (.cse112 (not (= (select |#length| 27) 9))) (.cse113 (not (= 117 (select .cse127 2)))) (.cse114 (not (= (select |#valid| 9) 1))) (.cse115 (not (= 32 (select .cse126 1)))) (.cse116 (not (= ~head~0.base 0))) (.cse117 (not (= ~cleanupTimeShifts~0 4))) (.cse118 (not (= (select |#valid| 18) 1))) (.cse119 (not (= 0 (select .cse125 6)))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse120 (not (= (select .cse124 0) 79))) (.cse3 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (= ~pumpRunning~0 0)) (.cse83 (not .cse5)) (.cse121 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 1))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (or .cse8 (= ~waterLevel~0 1)))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse4 .cse0 .cse1) .cse5 .cse6 .cse7)) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 (not (= |old(~waterLevel~0)| 1)) .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (and .cse4 .cse83) .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (let ((.cse122 (or .cse14 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (or .cse14 (and .cse4 .cse121 .cse83 .cse122) (not (< |old(~waterLevel~0)| 2)) (and .cse121 .cse2 .cse122) .cse5)) (or .cse14 .cse5 .cse6 (and .cse8 .cse2) .cse7) (or .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 (and (= |timeShift_getWaterLevel_~retValue_acc~5#1| |timeShift_getWaterLevel_#res#1|) (= |timeShift_getWaterLevel_#res#1| |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1|) (= |timeShift_getWaterLevel_~retValue_acc~5#1| ~waterLevel~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~5#1| 0)) .cse6 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse7 .cse120) (let ((.cse123 (<= ~waterLevel~0 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 (and .cse4 .cse123 .cse121 .cse83) .cse5 (and .cse123 .cse121 .cse2)))))) [2022-11-16 16:00:45,883 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse17 (not (= |old(~waterLevel~0)| 1))) (.cse6 (or .cse2 (= ~waterLevel~0 1))) (.cse5 (<= ~waterLevel~0 1)) (.cse4 (= ~pumpRunning~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= |old(~waterLevel~0)| 0)) (and .cse2 .cse4)) (or (and .cse5 .cse6 .cse4) .cse7 (and .cse1 .cse5 .cse6) .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 (and .cse1 .cse8 .cse9) .cse3 (and .cse8 .cse9 .cse4))) (let ((.cse15 (select |#memory_int| 9)) (.cse14 (select |#memory_int| 1)) (.cse18 (select |#memory_int| 5)) (.cse22 (select |#memory_int| 16)) (.cse10 (select |#memory_int| 6)) (.cse16 (select |#memory_int| 8)) (.cse12 (select |#memory_int| 14)) (.cse20 (select |#memory_int| 11)) (.cse19 (select |#memory_int| 7)) (.cse21 (select |#memory_int| 10)) (.cse11 (select |#memory_int| 13)) (.cse13 (select |#memory_int| 15))) (or (not (= (select .cse10 1) 102)) (not (= (select |#length| 6) 4)) (not (= (select |#valid| 23) 1)) (not (= 77 (select .cse11 1))) (not (= (select |#length| 28) 25)) .cse0 (not (= 73 (select .cse12 2))) (not (= (select .cse13 2) 0)) (not (= (select .cse14 0) 48)) (not (= 30 (select |#length| 23))) (not (= (select .cse15 3) 0)) .cse1 (not (= |#NULL.offset| 0)) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 4) 13)) (not (= (select .cse16 0) 79)) (not (= (select |#length| 15) 3)) (not (= 31 (select |#length| 2))) (not (= (select .cse15 1) 102)) (not (= (select |#valid| 12) 1)) (not (= (select .cse15 0) 79)) (not (= (select .cse10 2) 102)) (not (= 2 (select |#length| 1))) (not (= 30 (select |#length| 26))) .cse17 (not (= (select .cse18 0) 79)) (not (= 2 (select |#length| 11))) (not (= 44 (select .cse11 0))) (not (= 58 (select .cse19 5))) (not (= (select .cse15 2) 102)) (not (= 116 (select .cse11 3))) (not (= 1 ~systemActive~0)) (not (= (select .cse10 3) 0)) (not (= (select |#length| 12) 13)) (not (= (select .cse12 0) 67)) (not (= (select |#valid| 6) 1)) (not (= (select |#length| 8) 3)) (not (= (select .cse20 0) 10)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse18 1) 110)) (not (= (select |#valid| 3) 1)) (not (= 30 (select |#length| 20))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= 25 (select |#length| 25))) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select .cse12 4) 0)) (not (= (select |#valid| 16) 1)) (not (= 101 (select .cse11 2))) (not (= (select |#length| 21) 9)) (not (= (select |#valid| 28) 1)) (not (= (select .cse19 6) 0)) (not (= (select |#valid| 15) 1)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= 109 (select .cse19 3))) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse14 1) 0)) (not (= 3 (select |#length| 5))) (not (= (select |#valid| 24) 1)) (not (= (select .cse19 1) 80)) (not (= (select |#length| 19) 21)) (not (= 5 (select |#length| 14))) (not (= (select |#valid| 19) 1)) (not (= (select .cse21 0) 41)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 3 (select |#length| 10))) (not (= (select .cse18 2) 0)) (not (= 2 (select |#length| 16))) (not (= 41 (select .cse22 0))) (not (= (select |#length| 24) 9)) (not (= 112 (select .cse19 4))) (not (= (select |#valid| 8) 1)) (not (= (select .cse22 1) 0)) (not (= (select |#valid| 4) 1)) (not (= 7 (select |#length| 13))) (not (= (select .cse13 1) 75)) (not (= |#NULL.base| 0)) (not (= 7 (select |#length| 7))) (not (= (select .cse16 2) 0)) (not (= (select |#length| 17) 30)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select .cse10 0) 79)) (not (= (select |#length| 22) 21)) (not (= (select .cse12 1) 82)) (not (= (select |#valid| 14) 1)) (not (= 110 (select .cse16 1))) (not (= (select |#valid| 13) 1)) (not (= 58 (select .cse11 5))) (not (= (select .cse12 3) 84)) (not (= (select |#valid| 2) 1)) (not (= 104 (select .cse11 4))) (not (= (select |#length| 9) 4)) (not (= 9 (select |#length| 18))) (not (= (select .cse20 1) 0)) (not (= (select .cse21 2) 0)) (not (= (select |#valid| 17) 1)) (not (= 44 (select .cse19 0))) (not (= (select |#length| 27) 9)) (not (= 117 (select .cse19 2))) (not (= (select |#valid| 9) 1)) (not (= 32 (select .cse21 1))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 0 (select .cse11 6))) (not (= (select .cse13 0) 79)))) (or .cse0 .cse1 .cse17 (and .cse6 .cse4) .cse3) (let ((.cse23 (or .cse0 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (or (and .cse5 .cse23) .cse0 (and (< ~waterLevel~0 3) .cse4 .cse23) .cse3 (not (< |old(~waterLevel~0)| 3))))))) [2022-11-16 16:00:45,884 INFO L899 garLoopResultBuilder]: For program point L335-1(line 335) no Hoare annotation was computed. [2022-11-16 16:00:45,884 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-11-16 16:00:45,886 INFO L895 garLoopResultBuilder]: At program point L141-1(lines 122 146) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse17 (not (= |old(~waterLevel~0)| 1))) (.cse6 (or .cse2 (= ~waterLevel~0 1))) (.cse5 (<= ~waterLevel~0 1)) (.cse4 (= ~pumpRunning~0 1)) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= |old(~waterLevel~0)| 0)) (and .cse2 .cse4)) (or (and .cse5 .cse6 .cse4) .cse7 (and .cse1 .cse5 .cse6) .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 (and .cse1 .cse8 .cse9) .cse3 (and .cse8 .cse9 .cse4))) (let ((.cse15 (select |#memory_int| 9)) (.cse14 (select |#memory_int| 1)) (.cse18 (select |#memory_int| 5)) (.cse22 (select |#memory_int| 16)) (.cse10 (select |#memory_int| 6)) (.cse16 (select |#memory_int| 8)) (.cse12 (select |#memory_int| 14)) (.cse20 (select |#memory_int| 11)) (.cse19 (select |#memory_int| 7)) (.cse21 (select |#memory_int| 10)) (.cse11 (select |#memory_int| 13)) (.cse13 (select |#memory_int| 15))) (or (not (= (select .cse10 1) 102)) (not (= (select |#length| 6) 4)) (not (= (select |#valid| 23) 1)) (not (= 77 (select .cse11 1))) (not (= (select |#length| 28) 25)) .cse0 (not (= 73 (select .cse12 2))) (not (= (select .cse13 2) 0)) (not (= (select .cse14 0) 48)) (not (= 30 (select |#length| 23))) (not (= (select .cse15 3) 0)) .cse1 (not (= |#NULL.offset| 0)) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 4) 13)) (not (= (select .cse16 0) 79)) (not (= (select |#length| 15) 3)) (not (= 31 (select |#length| 2))) (not (= (select .cse15 1) 102)) (not (= (select |#valid| 12) 1)) (not (= (select .cse15 0) 79)) (not (= (select .cse10 2) 102)) (not (= 2 (select |#length| 1))) (not (= 30 (select |#length| 26))) .cse17 (not (= (select .cse18 0) 79)) (not (= 2 (select |#length| 11))) (not (= 44 (select .cse11 0))) (not (= 58 (select .cse19 5))) (not (= (select .cse15 2) 102)) (not (= 116 (select .cse11 3))) (not (= 1 ~systemActive~0)) (not (= (select .cse10 3) 0)) (not (= (select |#length| 12) 13)) (not (= (select .cse12 0) 67)) (not (= (select |#valid| 6) 1)) (not (= (select |#length| 8) 3)) (not (= (select .cse20 0) 10)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse18 1) 110)) (not (= (select |#valid| 3) 1)) (not (= 30 (select |#length| 20))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= 25 (select |#length| 25))) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select .cse12 4) 0)) (not (= (select |#valid| 16) 1)) (not (= 101 (select .cse11 2))) (not (= (select |#length| 21) 9)) (not (= (select |#valid| 28) 1)) (not (= (select .cse19 6) 0)) (not (= (select |#valid| 15) 1)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= 109 (select .cse19 3))) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse14 1) 0)) (not (= 3 (select |#length| 5))) (not (= (select |#valid| 24) 1)) (not (= (select .cse19 1) 80)) (not (= (select |#length| 19) 21)) (not (= 5 (select |#length| 14))) (not (= (select |#valid| 19) 1)) (not (= (select .cse21 0) 41)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 3 (select |#length| 10))) (not (= (select .cse18 2) 0)) (not (= 2 (select |#length| 16))) (not (= 41 (select .cse22 0))) (not (= (select |#length| 24) 9)) (not (= 112 (select .cse19 4))) (not (= (select |#valid| 8) 1)) (not (= (select .cse22 1) 0)) (not (= (select |#valid| 4) 1)) (not (= 7 (select |#length| 13))) (not (= (select .cse13 1) 75)) (not (= |#NULL.base| 0)) (not (= 7 (select |#length| 7))) (not (= (select .cse16 2) 0)) (not (= (select |#length| 17) 30)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select .cse10 0) 79)) (not (= (select |#length| 22) 21)) (not (= (select .cse12 1) 82)) (not (= (select |#valid| 14) 1)) (not (= 110 (select .cse16 1))) (not (= (select |#valid| 13) 1)) (not (= 58 (select .cse11 5))) (not (= (select .cse12 3) 84)) (not (= (select |#valid| 2) 1)) (not (= 104 (select .cse11 4))) (not (= (select |#length| 9) 4)) (not (= 9 (select |#length| 18))) (not (= (select .cse20 1) 0)) (not (= (select .cse21 2) 0)) (not (= (select |#valid| 17) 1)) (not (= 44 (select .cse19 0))) (not (= (select |#length| 27) 9)) (not (= 117 (select .cse19 2))) (not (= (select |#valid| 9) 1)) (not (= 32 (select .cse21 1))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 0 (select .cse11 6))) (not (= (select .cse13 0) 79)))) (or .cse0 .cse1 .cse17 (and .cse6 .cse4) .cse3) (let ((.cse23 (or .cse0 (<= |old(~waterLevel~0)| ~waterLevel~0)))) (or (and .cse5 .cse23) .cse0 (and (< ~waterLevel~0 3) .cse4 .cse23) .cse3 (not (< |old(~waterLevel~0)| 3))))))) [2022-11-16 16:00:45,886 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-11-16 16:00:45,886 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 64 87) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (< |old(~waterLevel~0)| 3)))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 (and .cse1 (= ~pumpRunning~0 1)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-11-16 16:00:45,887 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 64 87) no Hoare annotation was computed. [2022-11-16 16:00:45,887 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 969) no Hoare annotation was computed. [2022-11-16 16:00:45,887 INFO L899 garLoopResultBuilder]: For program point L68-1(lines 67 86) no Hoare annotation was computed. [2022-11-16 16:00:45,887 INFO L895 garLoopResultBuilder]: At program point L130(lines 130 138) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and (<= ~waterLevel~0 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (< |old(~waterLevel~0)| 3))) (or (and (= ~waterLevel~0 1) .cse2) .cse0 .cse1 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-16 16:00:45,887 INFO L902 garLoopResultBuilder]: At program point L320(lines 261 324) the Hoare annotation is: true [2022-11-16 16:00:45,888 INFO L895 garLoopResultBuilder]: At program point L283(line 283) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 (< ~waterLevel~0 3) .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 2) .cse1 .cse2))) [2022-11-16 16:00:45,888 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-16 16:00:45,888 INFO L895 garLoopResultBuilder]: At program point L317(lines 270 318) the Hoare annotation is: false [2022-11-16 16:00:45,888 INFO L899 garLoopResultBuilder]: For program point L272(lines 271 316) no Hoare annotation was computed. [2022-11-16 16:00:45,888 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (< ~waterLevel~0 3)) (.cse2 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-16 16:00:45,888 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 16:00:45,889 INFO L895 garLoopResultBuilder]: At program point L314(lines 271 316) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2) (and .cse0 (< ~waterLevel~0 3) .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-11-16 16:00:45,889 INFO L899 garLoopResultBuilder]: For program point L281(lines 281 287) no Hoare annotation was computed. [2022-11-16 16:00:45,889 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2022-11-16 16:00:45,890 INFO L895 garLoopResultBuilder]: At program point L951(lines 951 958) the Hoare annotation is: (let ((.cse2 (select |#memory_int| 11)) (.cse8 (select |#memory_int| 8)) (.cse9 (select |#memory_int| 16)) (.cse4 (select |#memory_int| 9)) (.cse0 (select |#memory_int| 14)) (.cse5 (select |#memory_int| 7)) (.cse1 (select |#memory_int| 6)) (.cse6 (select |#memory_int| 13)) (.cse10 (select |#memory_int| 1)) (.cse11 (select |#memory_int| 15)) (.cse3 (select |#memory_int| 10)) (.cse7 (select |#memory_int| 5))) (and (= (select .cse0 3) 84) (= (select .cse1 2) 102) (= (select .cse2 1) 0) (= 1 (select |#valid| 5)) (= 32 (select .cse3 1)) (= (select |#length| 3) 12) (= (select .cse4 0) 79) (= (select |#valid| 15) 1) (= 112 (select .cse5 4)) (= (select .cse1 0) 79) (= 3 (select |#length| 10)) (= ~pumpRunning~0 0) (= (select |#valid| 26) 1) (= (select .cse5 1) 80) (= 58 (select .cse6 5)) (= (select |#length| 8) 3) (= (select |#length| 6) 4) (= (select |#valid| 9) 1) (= (select |#length| 4) 13) (= 117 (select .cse5 2)) (= (select .cse7 2) 0) (= 7 (select |#length| 7)) (= 7 (select |#length| 13)) (= 110 (select .cse8 1)) (= (select .cse1 1) 102) (= (select |#valid| 11) 1) (= (select |#valid| 27) 1) (= ~methaneLevelCritical~0 0) (= 58 (select .cse5 5)) (= (select .cse8 0) 79) (= 30 (select |#length| 23)) (= 41 (select .cse9 0)) (= 44 (select .cse5 0)) (= (select |#length| 24) 9) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 44 (select .cse6 0)) (= (select .cse2 0) 10) (= (select .cse0 4) 0) (= 2 (select |#length| 1)) (= (select |#length| 17) 30) (= |ULTIMATE.start_valid_product_~retValue_acc~9#1| 1) (= 73 (select .cse0 2)) (= 9 (select |#length| 18)) (= (select |#length| 19) 21) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= (select |#length| 22) 21) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= 3 (select |#length| 5)) (= 30 (select |#length| 26)) (= 77 (select .cse6 1)) (= 2 (select |#length| 11)) (= 1 ~systemActive~0) (= (select |#length| 15) 3) (= (select |#valid| 24) 1) (= (select .cse4 3) 0) (= (select |#valid| 12) 1) (= (select |#valid| 28) 1) (= (select .cse0 1) 82) (= (select |#valid| 4) 1) (= (select .cse4 1) 102) (= (select .cse8 2) 0) (= (select .cse9 1) 0) (= 101 (select .cse6 2)) (= 25 (select |#length| 25)) (= (select |#valid| 1) 1) (= (select .cse5 6) 0) (= (select .cse4 2) 102) (= (select |#valid| 20) 1) (= (select .cse7 0) 79) (= (select |#length| 12) 13) (= 2 (select |#length| 16)) (= (select |#valid| 21) 1) (= (select |#length| 9) 4) (= 104 (select .cse6 4)) (= (select |#length| 21) 9) (= (select |#valid| 14) 1) (= 116 (select .cse6 3)) (= 5 (select |#length| 14)) (= (select |#valid| 0) 0) (= 30 (select |#length| 20)) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= (select .cse0 0) 67) (= ~waterLevel~0 1) (= (select .cse3 2) 0) (= (select |#length| 27) 9) (= (select .cse10 0) 48) (= (select |#valid| 23) 1) (= (select |#valid| 19) 1) (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0) (= (select .cse11 1) 75) (= 109 (select .cse5 3)) (= (select .cse1 3) 0) (= 0 (select .cse6 6)) (= (select |#valid| 16) 1) (= (select .cse11 2) 0) (= (select |#valid| 6) 1) (= |ULTIMATE.start_valid_product_~retValue_acc~9#1| |ULTIMATE.start_valid_product_#res#1|) (= (select .cse10 1) 0) (= (select .cse11 0) 79) (= (select .cse3 0) 41) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= (select .cse7 1) 110) (= (select |#valid| 8) 1) (= (select |#length| 28) 25) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-16 16:00:45,890 INFO L902 garLoopResultBuilder]: At program point L951-2(lines 951 958) the Hoare annotation is: true [2022-11-16 16:00:45,891 INFO L895 garLoopResultBuilder]: At program point L307-2(lines 301 312) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (< ~waterLevel~0 3)) (.cse2 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-11-16 16:00:45,891 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-11-16 16:00:45,891 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-11-16 16:00:45,891 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 96 120) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-16 16:00:45,893 INFO L895 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: (let ((.cse15 (<= ~waterLevel~0 1))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not .cse15)) (.cse14 (= 0 ~systemActive~0))) (and (let ((.cse6 (select |#memory_int| 9)) (.cse5 (select |#memory_int| 1)) (.cse8 (select |#memory_int| 5)) (.cse12 (select |#memory_int| 16)) (.cse0 (select |#memory_int| 6)) (.cse7 (select |#memory_int| 8)) (.cse3 (select |#memory_int| 14)) (.cse10 (select |#memory_int| 11)) (.cse9 (select |#memory_int| 7)) (.cse11 (select |#memory_int| 10)) (.cse1 (select |#memory_int| 13)) (.cse4 (select |#memory_int| 15))) (or (not (= (select .cse0 1) 102)) (not (= (select |#length| 6) 4)) (not (= ~waterLevel~0 1)) (not (= (select |#valid| 23) 1)) (not (= 77 (select .cse1 1))) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~6#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (not (= (select |#length| 28) 25)) .cse2 (not (= 73 (select .cse3 2))) (not (= (select .cse4 2) 0)) (not (= (select .cse5 0) 48)) (not (= 30 (select |#length| 23))) (not (= (select .cse6 3) 0)) (not (= |#NULL.offset| 0)) (not (= (select |#valid| 26) 1)) (not (= (select |#length| 4) 13)) (not (= (select .cse7 0) 79)) (not (= (select |#length| 15) 3)) (not (= 31 (select |#length| 2))) (not (= (select .cse6 1) 102)) (not (= (select |#valid| 12) 1)) (not (= (select .cse6 0) 79)) (not (= (select .cse0 2) 102)) (not (= 2 (select |#length| 1))) (not (= 30 (select |#length| 26))) (not (= (select .cse8 0) 79)) (not (= 2 (select |#length| 11))) (not (= 44 (select .cse1 0))) (not (= 58 (select .cse9 5))) (not (= (select .cse6 2) 102)) (not (= 116 (select .cse1 3))) (not (= 1 ~systemActive~0)) (not (= (select .cse0 3) 0)) (not (= (select |#length| 12) 13)) (not (= (select .cse3 0) 67)) (not (= (select |#valid| 6) 1)) (not (= (select |#length| 8) 3)) (not (= (select .cse10 0) 10)) (not (< 0 |#StackHeapBarrier|)) (not (= (select .cse8 1) 110)) (not (= (select |#valid| 3) 1)) (not (= 30 (select |#length| 20))) (not (= (select |#valid| 25) 1)) (not (= ~head~0.offset 0)) (not (= (select |#valid| 20) 1)) (not (= 25 (select |#length| 25))) (not (= (select |#valid| 21) 1)) (not (= (select |#valid| 11) 1)) (not (= (select .cse3 4) 0)) (not (= (select |#valid| 16) 1)) (not (= 101 (select .cse1 2))) (not (= (select |#length| 21) 9)) (not (= (select |#valid| 28) 1)) (not (= (select .cse9 6) 0)) (not (= (select |#valid| 15) 1)) (not (= 1 (select |#valid| 5))) (not (= (select |#length| 3) 12)) (not (= (select |#valid| 0) 0)) (not (= 109 (select .cse9 3))) (not (= ~methaneLevelCritical~0 0)) (not (= (select |#valid| 27) 1)) (not (= (select .cse5 1) 0)) (not (= 3 (select |#length| 5))) (not (= (select |#valid| 24) 1)) (not (= (select .cse9 1) 80)) (not (= (select |#length| 19) 21)) (not (= 5 (select |#length| 14))) (not (= (select |#valid| 19) 1)) (not (= (select .cse11 0) 41)) (not (= (select |#valid| 1) 1)) (not (= (select |#valid| 22) 1)) (not (= 3 (select |#length| 10))) (not (= (select .cse8 2) 0)) (not (= 2 (select |#length| 16))) (not (= 41 (select .cse12 0))) (not (= (select |#length| 24) 9)) (not (= 112 (select .cse9 4))) (not (= (select |#valid| 8) 1)) (not (= (select .cse12 1) 0)) (not (= (select |#valid| 4) 1)) (not (= 7 (select |#length| 13))) (not (= (select .cse4 1) 75)) (not (= |#NULL.base| 0)) (not (= 7 (select |#length| 7))) (not (= (select .cse7 2) 0)) (not (= (select |#length| 17) 30)) (not (= (select |#valid| 7) 1)) (not (= (select |#valid| 10) 1)) (not (= (select .cse0 0) 79)) (not (= (select |#length| 22) 21)) (not (= (select .cse3 1) 82)) (not (= (select |#valid| 14) 1)) (not (= 110 (select .cse7 1))) (not (= (select |#valid| 13) 1)) (not (= 58 (select .cse1 5))) (not (= (select .cse3 3) 84)) (not (= (select |#valid| 2) 1)) (not (= 104 (select .cse1 4))) (not (= (select |#length| 9) 4)) (not (= 9 (select |#length| 18))) (not (= (select .cse10 1) 0)) (not (= (select .cse11 2) 0)) (not (= (select |#valid| 17) 1)) (not (= 44 (select .cse9 0))) (not (= (select |#length| 27) 9)) (not (= 117 (select .cse9 2))) (not (= (select |#valid| 9) 1)) (not (= 32 (select .cse11 1))) (not (= ~head~0.base 0)) (not (= ~cleanupTimeShifts~0 4)) (not (= (select |#valid| 18) 1)) (not (= 0 (select .cse1 6))) (not (= (select .cse4 0) 79)))) (or .cse2 (and (= ~pumpRunning~0 0) (<= 0 |processEnvironment__wrappee__highWaterSensor_~tmp~0#1|)) .cse13 .cse14) (or .cse2 .cse15 .cse14 (not (< ~waterLevel~0 3))) (or (not (= |old(~pumpRunning~0)| 1)) .cse13 .cse14)))) [2022-11-16 16:00:45,895 INFO L895 garLoopResultBuilder]: At program point L104(lines 104 112) the Hoare annotation is: (let ((.cse128 (select |#memory_int| 16)) (.cse122 (select |#memory_int| 10)) (.cse124 (select |#memory_int| 11)) (.cse123 (select |#memory_int| 7)) (.cse129 (select |#memory_int| 5)) (.cse126 (select |#memory_int| 8)) (.cse131 (select |#memory_int| 9)) (.cse130 (select |#memory_int| 1)) (.cse120 (select |#memory_int| 15)) (.cse125 (select |#memory_int| 14)) (.cse121 (select |#memory_int| 13)) (.cse127 (select |#memory_int| 6))) (let ((.cse115 (= ~pumpRunning~0 0)) (.cse116 (not (<= ~waterLevel~0 1))) (.cse117 (= 0 ~systemActive~0)) (.cse0 (not (= (select .cse127 1) 102))) (.cse1 (not (= (select |#length| 6) 4))) (.cse2 (not (= (select |#valid| 23) 1))) (.cse3 (not (= 77 (select .cse121 1)))) (.cse8 (not (= (select |#length| 28) 25))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= 73 (select .cse125 2)))) (.cse11 (not (= (select .cse120 2) 0))) (.cse12 (not (= (select .cse130 0) 48))) (.cse13 (not (= 30 (select |#length| 23)))) (.cse14 (not (= (select .cse131 3) 0))) (.cse15 (not (= |#NULL.offset| 0))) (.cse16 (not (= (select |#valid| 26) 1))) (.cse17 (not (= (select |#length| 4) 13))) (.cse18 (not (= (select .cse126 0) 79))) (.cse19 (not (= (select |#length| 15) 3))) (.cse20 (not (= 31 (select |#length| 2)))) (.cse21 (not (= (select .cse131 1) 102))) (.cse22 (not (= (select |#valid| 12) 1))) (.cse23 (not (= (select .cse131 0) 79))) (.cse24 (not (= (select .cse127 2) 102))) (.cse25 (not (= 2 (select |#length| 1)))) (.cse26 (not (= 30 (select |#length| 26)))) (.cse27 (not (= (select .cse129 0) 79))) (.cse28 (not (= 2 (select |#length| 11)))) (.cse29 (not (= 44 (select .cse121 0)))) (.cse30 (not (= 58 (select .cse123 5)))) (.cse31 (not (= (select .cse131 2) 102))) (.cse32 (not (= 116 (select .cse121 3)))) (.cse33 (not (= 1 ~systemActive~0))) (.cse34 (not (= (select .cse127 3) 0))) (.cse35 (not (= (select |#length| 12) 13))) (.cse36 (not (= (select .cse125 0) 67))) (.cse37 (not (= (select |#valid| 6) 1))) (.cse38 (not (= (select |#length| 8) 3))) (.cse39 (not (= (select .cse124 0) 10))) (.cse40 (not (< 0 |#StackHeapBarrier|))) (.cse41 (not (= (select .cse129 1) 110))) (.cse42 (not (= (select |#valid| 3) 1))) (.cse43 (not (= 30 (select |#length| 20)))) (.cse44 (not (= (select |#valid| 25) 1))) (.cse45 (not (= ~head~0.offset 0))) (.cse46 (not (= (select |#valid| 20) 1))) (.cse47 (not (= 25 (select |#length| 25)))) (.cse118 (not (<= 2 ~waterLevel~0))) (.cse48 (not (= (select |#valid| 21) 1))) (.cse49 (not (= (select |#valid| 11) 1))) (.cse50 (not (= (select .cse125 4) 0))) (.cse51 (not (= (select |#valid| 16) 1))) (.cse52 (not (= 101 (select .cse121 2)))) (.cse53 (not (= (select |#length| 21) 9))) (.cse54 (not (= (select |#valid| 28) 1))) (.cse55 (not (= (select .cse123 6) 0))) (.cse56 (not (= (select |#valid| 15) 1))) (.cse57 (not (= 1 (select |#valid| 5)))) (.cse58 (not (= (select |#length| 3) 12))) (.cse59 (not (= (select |#valid| 0) 0))) (.cse60 (not (= 109 (select .cse123 3)))) (.cse61 (not (= ~methaneLevelCritical~0 0))) (.cse62 (not (= (select |#valid| 27) 1))) (.cse63 (not (= (select .cse130 1) 0))) (.cse64 (not (= 3 (select |#length| 5)))) (.cse65 (not (= (select |#valid| 24) 1))) (.cse66 (not (= (select .cse123 1) 80))) (.cse67 (not (= (select |#length| 19) 21))) (.cse68 (not (= 5 (select |#length| 14)))) (.cse69 (not (= (select |#valid| 19) 1))) (.cse70 (not (= (select .cse122 0) 41))) (.cse71 (not (= (select |#valid| 1) 1))) (.cse72 (not (= (select |#valid| 22) 1))) (.cse73 (not (= 3 (select |#length| 10)))) (.cse74 (not (= (select .cse129 2) 0))) (.cse75 (not (= 2 (select |#length| 16)))) (.cse76 (not (= 41 (select .cse128 0)))) (.cse77 (not (= (select |#length| 24) 9))) (.cse78 (not (= 112 (select .cse123 4)))) (.cse79 (not (= (select |#valid| 8) 1))) (.cse80 (not (= (select .cse128 1) 0))) (.cse81 (not (= (select |#valid| 4) 1))) (.cse119 (not (<= ~waterLevel~0 2))) (.cse82 (not (= 7 (select |#length| 13)))) (.cse83 (not (= (select .cse120 1) 75))) (.cse84 (not (= |#NULL.base| 0))) (.cse85 (not (= 7 (select |#length| 7)))) (.cse86 (not (= (select .cse126 2) 0))) (.cse87 (not (= (select |#length| 17) 30))) (.cse88 (not (= (select |#valid| 7) 1))) (.cse89 (not (= (select |#valid| 10) 1))) (.cse90 (not (= (select .cse127 0) 79))) (.cse91 (not (= (select |#length| 22) 21))) (.cse92 (not (= (select .cse125 1) 82))) (.cse93 (not (= (select |#valid| 14) 1))) (.cse94 (not (= 110 (select .cse126 1)))) (.cse95 (not (= (select |#valid| 13) 1))) (.cse96 (not (= 58 (select .cse121 5)))) (.cse97 (not (= (select .cse125 3) 84))) (.cse98 (not (= (select |#valid| 2) 1))) (.cse99 (not (= 104 (select .cse121 4)))) (.cse100 (not (= (select |#length| 9) 4))) (.cse101 (not (= 9 (select |#length| 18)))) (.cse102 (not (= (select .cse124 1) 0))) (.cse103 (not (= (select .cse122 2) 0))) (.cse104 (not (= (select |#valid| 17) 1))) (.cse105 (not (= 44 (select .cse123 0)))) (.cse106 (not (= (select |#length| 27) 9))) (.cse107 (not (= 117 (select .cse123 2)))) (.cse108 (not (= (select |#valid| 9) 1))) (.cse109 (not (= 32 (select .cse122 1)))) (.cse110 (not (= ~head~0.base 0))) (.cse111 (not (= ~cleanupTimeShifts~0 4))) (.cse112 (not (= (select |#valid| 18) 1))) (.cse113 (not (= 0 (select .cse121 6)))) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1|)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~6#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse114 (not (= (select .cse120 0) 79)))) (and (or .cse0 .cse1 (not (= ~waterLevel~0 1)) .cse2 .cse3 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~retValue_acc~2#1| |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) .cse4 .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~6#1| 1) .cse6 .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114) (or .cse9 (and .cse115 (<= 0 |processEnvironment__wrappee__highWaterSensor_~tmp~0#1|)) .cse116 .cse117) (or .cse9 .cse118 (and .cse115 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 1)) .cse119 .cse117) (or (not (= |old(~pumpRunning~0)| 1)) .cse116 .cse117) (or .cse0 .cse1 .cse2 .cse3 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse118 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse119 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 (and .cse4 .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_~retValue_acc~6#1| 0) .cse6 .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 1)) .cse114)))) [2022-11-16 16:00:45,895 INFO L895 garLoopResultBuilder]: At program point L100(lines 100 117) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-16 16:00:45,895 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 96 120) no Hoare annotation was computed. [2022-11-16 16:00:45,896 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-16 16:00:45,896 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 96 120) no Hoare annotation was computed. [2022-11-16 16:00:45,896 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 376 387) no Hoare annotation was computed. [2022-11-16 16:00:45,896 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 376 387) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2) (or (not (= ~pumpRunning~0 1)) .cse0 .cse1 .cse2))) [2022-11-16 16:00:45,900 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:00:45,902 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 16:00:46,006 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 04:00:46 BoogieIcfgContainer [2022-11-16 16:00:46,006 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 16:00:46,007 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 16:00:46,007 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 16:00:46,007 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 16:00:46,008 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 03:57:47" (3/4) ... [2022-11-16 16:00:46,011 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 16:00:46,018 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 16:00:46,018 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 16:00:46,018 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 16:00:46,018 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 16:00:46,018 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 16:00:46,019 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 16:00:46,019 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 16:00:46,036 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2022-11-16 16:00:46,037 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-16 16:00:46,038 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-11-16 16:00:46,038 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 16:00:46,039 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 16:00:46,039 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 16:00:46,040 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 16:00:46,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && retValue_acc == 1) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && \valid[19] == 1) && tmp == systemActive) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && retValue_acc == \result) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-16 16:00:46,068 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(\old(waterLevel) < 3)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) < 3)) [2022-11-16 16:00:46,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-16 16:00:46,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((\old(waterLevel) == waterLevel || waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((((waterLevel <= 1 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || ((waterLevel < 3 && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive) || !(\old(waterLevel) < 3)) [2022-11-16 16:00:46,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-16 16:00:46,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((\old(waterLevel) == waterLevel || waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || methaneLevelCritical == tmp) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((waterLevel <= 1 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || ((waterLevel < 3 && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive) || !(\old(waterLevel) < 3)) [2022-11-16 16:00:46,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || (pumpRunning == 0 && !(0 == systemActive))) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(\old(waterLevel) < 2)) || ((waterLevel <= \old(waterLevel) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || (((retValue_acc == \result && \result == tmp___0) && retValue_acc == waterLevel) && tmp == 0)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) [2022-11-16 16:00:46,073 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel == tmp___0) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(\old(waterLevel) < 2)) || 0 == systemActive) || (((waterLevel == tmp___0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || ((\result == tmp___0 && retValue_acc == waterLevel) && tmp == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((((((waterLevel <= 1 && waterLevel == tmp___0) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel == tmp___0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(2 <= \old(waterLevel)))) && (((((((waterLevel == tmp___0 && tmp___0 <= 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(waterLevel) <= 1)) || (((pumpRunning == 0 && waterLevel == tmp___0) && tmp___0 <= 0) && waterLevel <= \old(waterLevel))) || !(\old(pumpRunning) == 1)) || 0 == systemActive)) && ((((((waterLevel == tmp___0 && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-16 16:00:46,074 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) < 3))) && (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-16 16:00:46,074 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) < 3)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-11-16 16:00:46,074 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(waterLevel == 1)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || ((((((retValue_acc == \result && tmp == \result) && \result == tmp) && retValue_acc == 1) && retValue_acc == tmp___0) && retValue_acc == \result) && tmp___0 == 0)) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 0 <= tmp)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || (pumpRunning == 0 && tmp == 1)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(2 <= waterLevel)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || (((((tmp == \result && \result == tmp) && retValue_acc == 0) && retValue_acc == tmp___0) && retValue_acc == \result) && tmp___0 == 1)) || !(unknown-#memory_int-unknown[15][0] == 79)) [2022-11-16 16:00:46,116 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/witness.graphml [2022-11-16 16:00:46,117 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 16:00:46,118 INFO L158 Benchmark]: Toolchain (without parser) took 179833.53ms. Allocated memory was 111.1MB in the beginning and 583.0MB in the end (delta: 471.9MB). Free memory was 72.0MB in the beginning and 239.5MB in the end (delta: -167.6MB). Peak memory consumption was 302.3MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,118 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 111.1MB. Free memory is still 89.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 16:00:46,119 INFO L158 Benchmark]: CACSL2BoogieTranslator took 518.16ms. Allocated memory is still 111.1MB. Free memory was 71.7MB in the beginning and 77.9MB in the end (delta: -6.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,120 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.16ms. Allocated memory is still 111.1MB. Free memory was 77.9MB in the beginning and 75.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,120 INFO L158 Benchmark]: Boogie Preprocessor took 27.95ms. Allocated memory is still 111.1MB. Free memory was 75.3MB in the beginning and 73.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,120 INFO L158 Benchmark]: RCFGBuilder took 760.47ms. Allocated memory is still 111.1MB. Free memory was 73.5MB in the beginning and 45.9MB in the end (delta: 27.6MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,121 INFO L158 Benchmark]: TraceAbstraction took 178360.69ms. Allocated memory was 111.1MB in the beginning and 583.0MB in the end (delta: 471.9MB). Free memory was 45.3MB in the beginning and 245.8MB in the end (delta: -200.6MB). Peak memory consumption was 323.6MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,122 INFO L158 Benchmark]: Witness Printer took 110.66ms. Allocated memory is still 583.0MB. Free memory was 245.8MB in the beginning and 239.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-16 16:00:46,125 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 111.1MB. Free memory is still 89.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 518.16ms. Allocated memory is still 111.1MB. Free memory was 71.7MB in the beginning and 77.9MB in the end (delta: -6.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.16ms. Allocated memory is still 111.1MB. Free memory was 77.9MB in the beginning and 75.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.95ms. Allocated memory is still 111.1MB. Free memory was 75.3MB in the beginning and 73.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 760.47ms. Allocated memory is still 111.1MB. Free memory was 73.5MB in the beginning and 45.9MB in the end (delta: 27.6MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * TraceAbstraction took 178360.69ms. Allocated memory was 111.1MB in the beginning and 583.0MB in the end (delta: 471.9MB). Free memory was 45.3MB in the beginning and 245.8MB in the end (delta: -200.6MB). Peak memory consumption was 323.6MB. Max. memory is 16.1GB. * Witness Printer took 110.66ms. Allocated memory is still 583.0MB. Free memory was 245.8MB in the beginning and 239.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 969]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 56 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 178.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 34.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 62.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2512 SdHoareTripleChecker+Valid, 6.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2491 mSDsluCounter, 2374 SdHoareTripleChecker+Invalid, 5.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1783 mSDsCounter, 1518 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4309 IncrementalHoareTripleChecker+Invalid, 5827 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1518 mSolverCounterUnsat, 591 mSDtfsCounter, 4309 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 549 GetRequests, 339 SyntacticMatches, 13 SemanticMatches, 197 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5269 ImplicationChecksByTransitivity, 85.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=865occurred in iteration=9, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 293 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 34 LocationsWithAnnotation, 1350 PreInvPairs, 1703 NumberOfFragments, 10407 HoareAnnotationTreeSize, 1350 FomulaSimplifications, 5643 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 34 FomulaSimplificationsInter, 93198 FormulaSimplificationTreeSizeReductionInter, 60.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.7s InterpolantComputationTime, 545 NumberOfCodeBlocks, 545 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 633 ConstructedInterpolants, 0 QuantifiedInterpolants, 2002 SizeOfPredicates, 29 NumberOfNonLiveVariables, 1341 ConjunctsInSsa, 66 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 178/233 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 9.3s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 5, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 40, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 49, TOOLS_POST_TIME: 3.1s, TOOLS_POST_CALL_APPLICATIONS: 18, TOOLS_POST_CALL_TIME: 2.9s, TOOLS_POST_RETURN_APPLICATIONS: 14, TOOLS_POST_RETURN_TIME: 2.4s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 81, TOOLS_QUANTIFIERELIM_TIME: 8.3s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.8s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 113, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 14, DOMAIN_JOIN_TIME: 0.6s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 0, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 1, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 40, DOMAIN_ISBOTTOM_TIME: 0.2s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 4.6s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 4.6s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 1, CALL_SUMMARIZER_APPLICATIONS: 14, CALL_SUMMARIZER_CACHE_MISSES: 4, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 425, DAG_COMPRESSION_RETAINED_NODES: 107, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((\old(waterLevel) == waterLevel || waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((((waterLevel <= 1 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || ((waterLevel < 3 && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive) || !(\old(waterLevel) < 3)) - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) < 3)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((unknown-#memory_int-unknown[14][3] == 84 && unknown-#memory_int-unknown[6][2] == 102) && unknown-#memory_int-unknown[11][1] == 0) && 1 == \valid[5]) && 32 == unknown-#memory_int-unknown[10][1]) && unknown-#length-unknown[3] == 12) && unknown-#memory_int-unknown[9][0] == 79) && \valid[15] == 1) && 112 == unknown-#memory_int-unknown[7][4]) && unknown-#memory_int-unknown[6][0] == 79) && 3 == unknown-#length-unknown[10]) && pumpRunning == 0) && \valid[26] == 1) && unknown-#memory_int-unknown[7][1] == 80) && 58 == unknown-#memory_int-unknown[13][5]) && unknown-#length-unknown[8] == 3) && unknown-#length-unknown[6] == 4) && \valid[9] == 1) && unknown-#length-unknown[4] == 13) && 117 == unknown-#memory_int-unknown[7][2]) && unknown-#memory_int-unknown[5][2] == 0) && 7 == unknown-#length-unknown[7]) && 7 == unknown-#length-unknown[13]) && 110 == unknown-#memory_int-unknown[8][1]) && unknown-#memory_int-unknown[6][1] == 102) && \valid[11] == 1) && \valid[27] == 1) && methaneLevelCritical == 0) && 58 == unknown-#memory_int-unknown[7][5]) && unknown-#memory_int-unknown[8][0] == 79) && 30 == unknown-#length-unknown[23]) && 41 == unknown-#memory_int-unknown[16][0]) && 44 == unknown-#memory_int-unknown[7][0]) && unknown-#length-unknown[24] == 9) && 31 == unknown-#length-unknown[2]) && head == 0) && 44 == unknown-#memory_int-unknown[13][0]) && unknown-#memory_int-unknown[11][0] == 10) && unknown-#memory_int-unknown[14][4] == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[17] == 30) && retValue_acc == 1) && 73 == unknown-#memory_int-unknown[14][2]) && 9 == unknown-#length-unknown[18]) && unknown-#length-unknown[19] == 21) && \valid[3] == 1) && \valid[7] == 1) && unknown-#length-unknown[22] == 21) && \valid[18] == 1) && \valid[22] == 1) && 3 == unknown-#length-unknown[5]) && 30 == unknown-#length-unknown[26]) && 77 == unknown-#memory_int-unknown[13][1]) && 2 == unknown-#length-unknown[11]) && 1 == systemActive) && unknown-#length-unknown[15] == 3) && \valid[24] == 1) && unknown-#memory_int-unknown[9][3] == 0) && \valid[12] == 1) && \valid[28] == 1) && unknown-#memory_int-unknown[14][1] == 82) && \valid[4] == 1) && unknown-#memory_int-unknown[9][1] == 102) && unknown-#memory_int-unknown[8][2] == 0) && unknown-#memory_int-unknown[16][1] == 0) && 101 == unknown-#memory_int-unknown[13][2]) && 25 == unknown-#length-unknown[25]) && \valid[1] == 1) && unknown-#memory_int-unknown[7][6] == 0) && unknown-#memory_int-unknown[9][2] == 102) && \valid[20] == 1) && unknown-#memory_int-unknown[5][0] == 79) && unknown-#length-unknown[12] == 13) && 2 == unknown-#length-unknown[16]) && \valid[21] == 1) && unknown-#length-unknown[9] == 4) && 104 == unknown-#memory_int-unknown[13][4]) && unknown-#length-unknown[21] == 9) && \valid[14] == 1) && 116 == unknown-#memory_int-unknown[13][3]) && 5 == unknown-#length-unknown[14]) && \valid[0] == 0) && 30 == unknown-#length-unknown[20]) && \valid[25] == 1) && head == 0) && \valid[2] == 1) && #NULL == 0) && unknown-#memory_int-unknown[14][0] == 67) && waterLevel == 1) && unknown-#memory_int-unknown[10][2] == 0) && unknown-#length-unknown[27] == 9) && unknown-#memory_int-unknown[1][0] == 48) && \valid[23] == 1) && \valid[19] == 1) && tmp == systemActive) && unknown-#memory_int-unknown[15][1] == 75) && 109 == unknown-#memory_int-unknown[7][3]) && unknown-#memory_int-unknown[6][3] == 0) && 0 == unknown-#memory_int-unknown[13][6]) && \valid[16] == 1) && unknown-#memory_int-unknown[15][2] == 0) && \valid[6] == 1) && retValue_acc == \result) && unknown-#memory_int-unknown[1][1] == 0) && unknown-#memory_int-unknown[15][0] == 79) && unknown-#memory_int-unknown[10][0] == 41) && \valid[17] == 1) && \valid[10] == 1) && unknown-#memory_int-unknown[5][1] == 110) && \valid[8] == 1) && unknown-#length-unknown[28] == 25) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(waterLevel == 1)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || ((((((retValue_acc == \result && tmp == \result) && \result == tmp) && retValue_acc == 1) && retValue_acc == tmp___0) && retValue_acc == \result) && tmp___0 == 0)) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 0 <= tmp)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || (pumpRunning == 0 && tmp == 1)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(2 <= waterLevel)) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(waterLevel <= 2)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || (((((tmp == \result && \result == tmp) && retValue_acc == 0) && retValue_acc == tmp___0) && retValue_acc == \result) && tmp___0 == 1)) || !(unknown-#memory_int-unknown[15][0] == 79)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) < 3))) && (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == 1) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 1) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(\old(waterLevel) < 3)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) < 3)) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((waterLevel == 1 && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 343]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel == tmp___0) && waterLevel <= \old(waterLevel)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(\old(waterLevel) < 2)) || 0 == systemActive) || (((waterLevel == tmp___0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || ((\result == tmp___0 && retValue_acc == waterLevel) && tmp == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((((((waterLevel <= 1 && waterLevel == tmp___0) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel == tmp___0) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(2 <= \old(waterLevel)))) && (((((((waterLevel == tmp___0 && tmp___0 <= 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(waterLevel) <= 1)) || (((pumpRunning == 0 && waterLevel == tmp___0) && tmp___0 <= 0) && waterLevel <= \old(waterLevel))) || !(\old(pumpRunning) == 1)) || 0 == systemActive)) && ((((((waterLevel == tmp___0 && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && tmp == systemActive) && !(0 == systemActive)) || ((((splverifierCounter == 0 && waterLevel < 3) && tmp == systemActive) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 337]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || pumpRunning == 0) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) == 1)) || ((\old(waterLevel) == waterLevel || waterLevel == 1) && pumpRunning == 1)) || 0 == systemActive)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || methaneLevelCritical == tmp) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && (((((waterLevel <= 1 && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel)) || !(\old(pumpRunning) == 0)) || ((waterLevel < 3 && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive) || !(\old(waterLevel) < 3)) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((((((((waterLevel <= 1 && (\old(waterLevel) == waterLevel || waterLevel == 1)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(\old(waterLevel) == 1)) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || (pumpRunning == 0 && !(0 == systemActive))) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= \old(waterLevel)) && !(0 == systemActive)) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || !(\old(waterLevel) < 2)) || ((waterLevel <= \old(waterLevel) && pumpRunning == 1) && (!(\old(pumpRunning) == 0) || \old(waterLevel) <= waterLevel))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(unknown-#memory_int-unknown[6][1] == 102) || !(unknown-#length-unknown[6] == 4)) || !(\valid[23] == 1)) || !(77 == unknown-#memory_int-unknown[13][1])) || !(unknown-#length-unknown[28] == 25)) || !(\old(pumpRunning) == 0)) || !(73 == unknown-#memory_int-unknown[14][2])) || !(unknown-#memory_int-unknown[15][2] == 0)) || !(unknown-#memory_int-unknown[1][0] == 48)) || !(30 == unknown-#length-unknown[23])) || !(unknown-#memory_int-unknown[9][3] == 0)) || !(#NULL == 0)) || !(\valid[26] == 1)) || !(unknown-#length-unknown[4] == 13)) || !(unknown-#memory_int-unknown[8][0] == 79)) || !(unknown-#length-unknown[15] == 3)) || !(31 == unknown-#length-unknown[2])) || !(unknown-#memory_int-unknown[9][1] == 102)) || !(\valid[12] == 1)) || !(unknown-#memory_int-unknown[9][0] == 79)) || !(unknown-#memory_int-unknown[6][2] == 102)) || !(2 == unknown-#length-unknown[1])) || !(30 == unknown-#length-unknown[26])) || !(unknown-#memory_int-unknown[5][0] == 79)) || !(2 == unknown-#length-unknown[11])) || !(44 == unknown-#memory_int-unknown[13][0])) || !(58 == unknown-#memory_int-unknown[7][5])) || !(unknown-#memory_int-unknown[9][2] == 102)) || !(116 == unknown-#memory_int-unknown[13][3])) || !(1 == systemActive)) || !(unknown-#memory_int-unknown[6][3] == 0)) || !(unknown-#length-unknown[12] == 13)) || !(unknown-#memory_int-unknown[14][0] == 67)) || !(\valid[6] == 1)) || !(unknown-#length-unknown[8] == 3)) || !(unknown-#memory_int-unknown[11][0] == 10)) || !(0 < unknown-#StackHeapBarrier-unknown)) || !(unknown-#memory_int-unknown[5][1] == 110)) || !(\valid[3] == 1)) || !(30 == unknown-#length-unknown[20])) || !(\valid[25] == 1)) || !(head == 0)) || !(\valid[20] == 1)) || !(25 == unknown-#length-unknown[25])) || !(\valid[21] == 1)) || !(\valid[11] == 1)) || !(unknown-#memory_int-unknown[14][4] == 0)) || !(\valid[16] == 1)) || !(101 == unknown-#memory_int-unknown[13][2])) || !(unknown-#length-unknown[21] == 9)) || !(\valid[28] == 1)) || !(unknown-#memory_int-unknown[7][6] == 0)) || !(\valid[15] == 1)) || !(1 == \valid[5])) || !(unknown-#length-unknown[3] == 12)) || !(\valid[0] == 0)) || !(109 == unknown-#memory_int-unknown[7][3])) || !(methaneLevelCritical == 0)) || !(\valid[27] == 1)) || !(unknown-#memory_int-unknown[1][1] == 0)) || !(3 == unknown-#length-unknown[5])) || !(\valid[24] == 1)) || !(unknown-#memory_int-unknown[7][1] == 80)) || !(unknown-#length-unknown[19] == 21)) || !(5 == unknown-#length-unknown[14])) || !(\valid[19] == 1)) || !(unknown-#memory_int-unknown[10][0] == 41)) || !(\valid[1] == 1)) || !(\valid[22] == 1)) || !(3 == unknown-#length-unknown[10])) || !(unknown-#memory_int-unknown[5][2] == 0)) || !(2 == unknown-#length-unknown[16])) || !(41 == unknown-#memory_int-unknown[16][0])) || !(unknown-#length-unknown[24] == 9)) || !(112 == unknown-#memory_int-unknown[7][4])) || !(\valid[8] == 1)) || !(unknown-#memory_int-unknown[16][1] == 0)) || !(\valid[4] == 1)) || !(7 == unknown-#length-unknown[13])) || !(unknown-#memory_int-unknown[15][1] == 75)) || !(#NULL == 0)) || !(7 == unknown-#length-unknown[7])) || !(unknown-#memory_int-unknown[8][2] == 0)) || !(unknown-#length-unknown[17] == 30)) || !(\valid[7] == 1)) || !(\valid[10] == 1)) || !(unknown-#memory_int-unknown[6][0] == 79)) || !(unknown-#length-unknown[22] == 21)) || !(unknown-#memory_int-unknown[14][1] == 82)) || !(\valid[14] == 1)) || !(110 == unknown-#memory_int-unknown[8][1])) || !(\valid[13] == 1)) || (((retValue_acc == \result && \result == tmp___0) && retValue_acc == waterLevel) && tmp == 0)) || !(\old(waterLevel) <= 2)) || !(58 == unknown-#memory_int-unknown[13][5])) || !(unknown-#memory_int-unknown[14][3] == 84)) || !(\valid[2] == 1)) || !(104 == unknown-#memory_int-unknown[13][4])) || !(unknown-#length-unknown[9] == 4)) || !(9 == unknown-#length-unknown[18])) || !(unknown-#memory_int-unknown[11][1] == 0)) || !(unknown-#memory_int-unknown[10][2] == 0)) || !(\valid[17] == 1)) || !(44 == unknown-#memory_int-unknown[7][0])) || !(unknown-#length-unknown[27] == 9)) || !(117 == unknown-#memory_int-unknown[7][2])) || !(\valid[9] == 1)) || !(32 == unknown-#memory_int-unknown[10][1])) || !(head == 0)) || !(cleanupTimeShifts == 4)) || !(\valid[18] == 1)) || !(0 == unknown-#memory_int-unknown[13][6])) || !(2 <= \old(waterLevel))) || !(unknown-#memory_int-unknown[15][0] == 79))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 0) && waterLevel <= \old(waterLevel)) && !(0 == systemActive))) || 0 == systemActive) || ((waterLevel <= 0 && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-16 16:00:46,199 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf249805-fe65-4011-877e-56c0f9a1dab2/bin/utaipan-Xvt2sAort0/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE