./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:26:30,642 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:26:30,643 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:26:30,664 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:26:30,665 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:26:30,666 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:26:30,667 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:26:30,670 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:26:30,671 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:26:30,672 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:26:30,672 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:26:30,673 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:26:30,673 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:26:30,674 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:26:30,675 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:26:30,676 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:26:30,676 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:26:30,677 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:26:30,678 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:26:30,679 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:26:30,680 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:26:30,681 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:26:30,681 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:26:30,682 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:26:30,683 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:26:30,685 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:26:30,685 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:26:30,685 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:26:30,686 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:26:30,686 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:26:30,687 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:26:30,687 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:26:30,687 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:26:30,688 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:26:30,689 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:26:30,689 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:26:30,689 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:26:30,690 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:26:30,690 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:26:30,690 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:26:30,691 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:26:30,692 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:26:30,692 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:26:30,713 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:26:30,714 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:26:30,714 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:26:30,714 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:26:30,715 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:26:30,715 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:26:30,715 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:26:30,715 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:26:30,716 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:26:30,716 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:26:30,716 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:26:30,716 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:26:30,716 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:26:30,717 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:26:30,718 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:26:30,718 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:26:30,718 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:26:30,718 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:26:30,718 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:26:30,719 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:26:30,719 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:26:30,719 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:26:30,719 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:26:30,719 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:26:30,720 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:26:30,720 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:26:30,720 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:26:30,720 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:26:30,720 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a [2022-07-19 17:26:30,955 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:26:30,982 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:26:30,984 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:26:30,984 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:26:30,985 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:26:30,986 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-07-19 17:26:31,034 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a475154e1/6cb711b58b0f4c58971eea291424f0f9/FLAG5ae3d6e93 [2022-07-19 17:26:31,462 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:26:31,463 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-07-19 17:26:31,473 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a475154e1/6cb711b58b0f4c58971eea291424f0f9/FLAG5ae3d6e93 [2022-07-19 17:26:31,482 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a475154e1/6cb711b58b0f4c58971eea291424f0f9 [2022-07-19 17:26:31,484 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:26:31,485 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:26:31,492 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:26:31,493 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:26:31,495 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:26:31,496 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:31,503 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27b6831c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31, skipping insertion in model container [2022-07-19 17:26:31,503 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:31,508 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:26:31,538 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:26:31,768 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-07-19 17:26:31,857 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:26:31,866 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:26:31,890 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-07-19 17:26:31,931 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:26:31,946 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:26:31,947 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31 WrapperNode [2022-07-19 17:26:31,947 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:26:31,948 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:26:31,948 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:26:31,948 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:26:31,953 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:31,976 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,003 INFO L137 Inliner]: procedures = 65, calls = 180, calls flagged for inlining = 30, calls inlined = 27, statements flattened = 356 [2022-07-19 17:26:32,003 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:26:32,004 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:26:32,004 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:26:32,004 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:26:32,009 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,010 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,018 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,018 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,028 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,036 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,038 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,040 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:26:32,040 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:26:32,040 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:26:32,040 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:26:32,053 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (1/1) ... [2022-07-19 17:26:32,071 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:26:32,079 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:32,091 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:26:32,092 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:26:32,126 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:26:32,126 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-07-19 17:26:32,127 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-07-19 17:26:32,127 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:26:32,127 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:26:32,127 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:26:32,127 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:26:32,127 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-07-19 17:26:32,127 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-07-19 17:26:32,127 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:26:32,127 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:26:32,128 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-07-19 17:26:32,128 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-07-19 17:26:32,128 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-19 17:26:32,128 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-19 17:26:32,128 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-07-19 17:26:32,128 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-07-19 17:26:32,128 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-19 17:26:32,128 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-19 17:26:32,129 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-19 17:26:32,129 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-19 17:26:32,129 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:26:32,129 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-07-19 17:26:32,130 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-07-19 17:26:32,130 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:26:32,130 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:26:32,130 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:26:32,130 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:26:32,235 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:26:32,236 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:26:32,533 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:26:32,542 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:26:32,544 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:26:32,552 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:32 BoogieIcfgContainer [2022-07-19 17:26:32,552 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:26:32,553 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:26:32,554 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:26:32,556 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:26:32,563 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:26:31" (1/3) ... [2022-07-19 17:26:32,564 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3405910c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:26:32, skipping insertion in model container [2022-07-19 17:26:32,564 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:31" (2/3) ... [2022-07-19 17:26:32,564 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3405910c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:26:32, skipping insertion in model container [2022-07-19 17:26:32,564 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:32" (3/3) ... [2022-07-19 17:26:32,565 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_productSimulator.cil.c [2022-07-19 17:26:32,574 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:26:32,575 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:26:32,633 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:26:32,640 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3b6169c2, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3720235e [2022-07-19 17:26:32,641 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:26:32,647 INFO L276 IsEmpty]: Start isEmpty. Operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-07-19 17:26:32,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-19 17:26:32,660 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:32,661 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:32,662 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:32,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:32,667 INFO L85 PathProgramCache]: Analyzing trace with hash 1460925416, now seen corresponding path program 1 times [2022-07-19 17:26:32,673 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:32,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1463232078] [2022-07-19 17:26:32,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:32,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:32,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:32,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:32,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:32,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:32,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:32,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:32,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-19 17:26:32,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-19 17:26:32,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:32,976 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:32,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:32,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1463232078] [2022-07-19 17:26:32,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1463232078] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:32,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:32,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:26:32,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134555755] [2022-07-19 17:26:32,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:32,982 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:26:32,982 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:33,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:26:33,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:26:33,010 INFO L87 Difference]: Start difference. First operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:33,067 INFO L93 Difference]: Finished difference Result 272 states and 376 transitions. [2022-07-19 17:26:33,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:26:33,070 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 62 [2022-07-19 17:26:33,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:33,081 INFO L225 Difference]: With dead ends: 272 [2022-07-19 17:26:33,082 INFO L226 Difference]: Without dead ends: 139 [2022-07-19 17:26:33,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:26:33,092 INFO L413 NwaCegarLoop]: 195 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:33,093 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 195 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:33,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2022-07-19 17:26:33,148 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 139. [2022-07-19 17:26:33,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-07-19 17:26:33,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 186 transitions. [2022-07-19 17:26:33,155 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 186 transitions. Word has length 62 [2022-07-19 17:26:33,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:33,157 INFO L495 AbstractCegarLoop]: Abstraction has 139 states and 186 transitions. [2022-07-19 17:26:33,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,157 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 186 transitions. [2022-07-19 17:26:33,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-19 17:26:33,170 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:33,170 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:33,170 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:26:33,170 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:33,171 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:33,172 INFO L85 PathProgramCache]: Analyzing trace with hash -1003270502, now seen corresponding path program 1 times [2022-07-19 17:26:33,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:33,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224235197] [2022-07-19 17:26:33,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:33,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:33,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:33,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:33,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:33,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:33,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:33,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:33,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-19 17:26:33,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-19 17:26:33,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,339 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:33,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:33,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224235197] [2022-07-19 17:26:33,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1224235197] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:33,340 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:33,340 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:26:33,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1674556337] [2022-07-19 17:26:33,341 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:33,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:26:33,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:33,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:26:33,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:33,344 INFO L87 Difference]: Start difference. First operand 139 states and 186 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:33,362 INFO L93 Difference]: Finished difference Result 221 states and 296 transitions. [2022-07-19 17:26:33,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:26:33,363 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-07-19 17:26:33,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:33,365 INFO L225 Difference]: With dead ends: 221 [2022-07-19 17:26:33,366 INFO L226 Difference]: Without dead ends: 130 [2022-07-19 17:26:33,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:33,369 INFO L413 NwaCegarLoop]: 173 mSDtfsCounter, 21 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:33,370 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 320 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:33,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2022-07-19 17:26:33,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 130. [2022-07-19 17:26:33,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-07-19 17:26:33,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 174 transitions. [2022-07-19 17:26:33,399 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 174 transitions. Word has length 63 [2022-07-19 17:26:33,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:33,399 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 174 transitions. [2022-07-19 17:26:33,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,400 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 174 transitions. [2022-07-19 17:26:33,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-07-19 17:26:33,402 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:33,402 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:33,402 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:26:33,403 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:33,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:33,403 INFO L85 PathProgramCache]: Analyzing trace with hash 742899427, now seen corresponding path program 1 times [2022-07-19 17:26:33,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:33,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1381542920] [2022-07-19 17:26:33,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:33,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:33,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:33,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:33,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:33,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:33,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:33,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:33,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:33,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:33,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,519 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:33,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:33,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1381542920] [2022-07-19 17:26:33,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1381542920] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:33,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:33,520 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:26:33,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [567006065] [2022-07-19 17:26:33,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:33,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:26:33,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:33,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:26:33,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:33,521 INFO L87 Difference]: Start difference. First operand 130 states and 174 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:33,543 INFO L93 Difference]: Finished difference Result 342 states and 465 transitions. [2022-07-19 17:26:33,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:26:33,544 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 68 [2022-07-19 17:26:33,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:33,546 INFO L225 Difference]: With dead ends: 342 [2022-07-19 17:26:33,546 INFO L226 Difference]: Without dead ends: 235 [2022-07-19 17:26:33,547 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:33,547 INFO L413 NwaCegarLoop]: 208 mSDtfsCounter, 135 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:33,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 349 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:33,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-07-19 17:26:33,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 232. [2022-07-19 17:26:33,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-07-19 17:26:33,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 315 transitions. [2022-07-19 17:26:33,568 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 315 transitions. Word has length 68 [2022-07-19 17:26:33,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:33,569 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 315 transitions. [2022-07-19 17:26:33,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-19 17:26:33,569 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 315 transitions. [2022-07-19 17:26:33,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-07-19 17:26:33,570 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:33,570 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:33,570 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:26:33,570 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:33,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:33,571 INFO L85 PathProgramCache]: Analyzing trace with hash 999872991, now seen corresponding path program 1 times [2022-07-19 17:26:33,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:33,571 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [32142764] [2022-07-19 17:26:33,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:33,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:33,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:33,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:33,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:33,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:33,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:33,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:33,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-19 17:26:33,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-19 17:26:33,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,723 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-07-19 17:26:33,723 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:33,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [32142764] [2022-07-19 17:26:33,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [32142764] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:33,723 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:33,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:33,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [629323831] [2022-07-19 17:26:33,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:33,724 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:33,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:33,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:33,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:33,725 INFO L87 Difference]: Start difference. First operand 232 states and 315 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-07-19 17:26:33,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:33,892 INFO L93 Difference]: Finished difference Result 582 states and 820 transitions. [2022-07-19 17:26:33,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:26:33,892 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 72 [2022-07-19 17:26:33,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:33,899 INFO L225 Difference]: With dead ends: 582 [2022-07-19 17:26:33,899 INFO L226 Difference]: Without dead ends: 373 [2022-07-19 17:26:33,900 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-19 17:26:33,901 INFO L413 NwaCegarLoop]: 190 mSDtfsCounter, 98 mSDsluCounter, 609 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 799 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:33,901 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 799 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:33,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2022-07-19 17:26:33,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 360. [2022-07-19 17:26:33,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-07-19 17:26:33,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 488 transitions. [2022-07-19 17:26:33,936 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 488 transitions. Word has length 72 [2022-07-19 17:26:33,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:33,936 INFO L495 AbstractCegarLoop]: Abstraction has 360 states and 488 transitions. [2022-07-19 17:26:33,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-07-19 17:26:33,936 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 488 transitions. [2022-07-19 17:26:33,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-07-19 17:26:33,937 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:33,937 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:33,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:26:33,938 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:33,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:33,938 INFO L85 PathProgramCache]: Analyzing trace with hash 997919659, now seen corresponding path program 1 times [2022-07-19 17:26:33,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:33,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873881029] [2022-07-19 17:26:33,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:33,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:33,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:33,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:33,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:33,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:33,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:33,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:33,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:33,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:33,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-19 17:26:34,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:34,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:34,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-19 17:26:34,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,026 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:34,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:34,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873881029] [2022-07-19 17:26:34,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873881029] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:34,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:34,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:34,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [821381697] [2022-07-19 17:26:34,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:34,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:34,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:34,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:34,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:34,027 INFO L87 Difference]: Start difference. First operand 360 states and 488 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-19 17:26:34,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:34,328 INFO L93 Difference]: Finished difference Result 1156 states and 1658 transitions. [2022-07-19 17:26:34,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:26:34,328 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) Word has length 92 [2022-07-19 17:26:34,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:34,334 INFO L225 Difference]: With dead ends: 1156 [2022-07-19 17:26:34,334 INFO L226 Difference]: Without dead ends: 819 [2022-07-19 17:26:34,336 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-07-19 17:26:34,338 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 300 mSDsluCounter, 508 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 714 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:34,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [309 Valid, 714 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:26:34,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 819 states. [2022-07-19 17:26:34,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 819 to 690. [2022-07-19 17:26:34,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-07-19 17:26:34,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 690 states and 922 transitions. [2022-07-19 17:26:34,407 INFO L78 Accepts]: Start accepts. Automaton has 690 states and 922 transitions. Word has length 92 [2022-07-19 17:26:34,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:34,408 INFO L495 AbstractCegarLoop]: Abstraction has 690 states and 922 transitions. [2022-07-19 17:26:34,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-19 17:26:34,409 INFO L276 IsEmpty]: Start isEmpty. Operand 690 states and 922 transitions. [2022-07-19 17:26:34,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-07-19 17:26:34,411 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:34,411 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:34,411 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:26:34,412 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:34,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:34,412 INFO L85 PathProgramCache]: Analyzing trace with hash -388283735, now seen corresponding path program 1 times [2022-07-19 17:26:34,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:34,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356018056] [2022-07-19 17:26:34,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:34,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:34,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:34,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:34,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:34,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:34,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:34,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:34,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:34,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-19 17:26:34,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:34,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:34,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-19 17:26:34,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,531 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:34,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:34,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356018056] [2022-07-19 17:26:34,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356018056] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:34,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:34,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:34,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544098498] [2022-07-19 17:26:34,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:34,532 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:34,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:34,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:34,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:34,534 INFO L87 Difference]: Start difference. First operand 690 states and 922 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-19 17:26:34,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:34,723 INFO L93 Difference]: Finished difference Result 1399 states and 1949 transitions. [2022-07-19 17:26:34,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:26:34,723 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-07-19 17:26:34,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:34,727 INFO L225 Difference]: With dead ends: 1399 [2022-07-19 17:26:34,727 INFO L226 Difference]: Without dead ends: 732 [2022-07-19 17:26:34,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:34,730 INFO L413 NwaCegarLoop]: 162 mSDtfsCounter, 95 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 210 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 629 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:34,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 629 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 210 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:34,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 732 states. [2022-07-19 17:26:34,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 732 to 702. [2022-07-19 17:26:34,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2022-07-19 17:26:34,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 702 states to 702 states and 934 transitions. [2022-07-19 17:26:34,755 INFO L78 Accepts]: Start accepts. Automaton has 702 states and 934 transitions. Word has length 92 [2022-07-19 17:26:34,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:34,756 INFO L495 AbstractCegarLoop]: Abstraction has 702 states and 934 transitions. [2022-07-19 17:26:34,756 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-19 17:26:34,756 INFO L276 IsEmpty]: Start isEmpty. Operand 702 states and 934 transitions. [2022-07-19 17:26:34,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-07-19 17:26:34,758 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:34,758 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:34,758 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:26:34,758 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:34,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:34,758 INFO L85 PathProgramCache]: Analyzing trace with hash 1534944299, now seen corresponding path program 1 times [2022-07-19 17:26:34,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:34,759 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [713313287] [2022-07-19 17:26:34,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:34,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:34,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:34,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:34,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:34,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:34,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:34,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:34,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:34,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-19 17:26:34,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:34,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:34,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-19 17:26:34,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:34,836 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:34,836 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:34,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [713313287] [2022-07-19 17:26:34,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [713313287] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:34,836 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:34,836 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:26:34,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161189701] [2022-07-19 17:26:34,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:34,837 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:26:34,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:34,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:26:34,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:26:34,838 INFO L87 Difference]: Start difference. First operand 702 states and 934 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-19 17:26:34,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:34,979 INFO L93 Difference]: Finished difference Result 1259 states and 1736 transitions. [2022-07-19 17:26:34,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:26:34,980 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2022-07-19 17:26:34,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:34,982 INFO L225 Difference]: With dead ends: 1259 [2022-07-19 17:26:34,982 INFO L226 Difference]: Without dead ends: 580 [2022-07-19 17:26:34,985 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:26:34,985 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 97 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:34,985 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 488 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:34,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2022-07-19 17:26:35,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 566. [2022-07-19 17:26:35,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2022-07-19 17:26:35,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 566 states to 566 states and 743 transitions. [2022-07-19 17:26:35,006 INFO L78 Accepts]: Start accepts. Automaton has 566 states and 743 transitions. Word has length 92 [2022-07-19 17:26:35,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:35,006 INFO L495 AbstractCegarLoop]: Abstraction has 566 states and 743 transitions. [2022-07-19 17:26:35,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-19 17:26:35,006 INFO L276 IsEmpty]: Start isEmpty. Operand 566 states and 743 transitions. [2022-07-19 17:26:35,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-07-19 17:26:35,008 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:35,008 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:35,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:26:35,008 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:35,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:35,009 INFO L85 PathProgramCache]: Analyzing trace with hash 1664630151, now seen corresponding path program 1 times [2022-07-19 17:26:35,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:35,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1970374243] [2022-07-19 17:26:35,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:35,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:35,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:35,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:35,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:35,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:35,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:35,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:35,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-19 17:26:35,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-19 17:26:35,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-19 17:26:35,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:35,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:35,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-19 17:26:35,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:35,105 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:35,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:35,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1970374243] [2022-07-19 17:26:35,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1970374243] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:35,105 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:35,105 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-19 17:26:35,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1602999928] [2022-07-19 17:26:35,106 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:35,106 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-19 17:26:35,106 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:35,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-19 17:26:35,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:35,107 INFO L87 Difference]: Start difference. First operand 566 states and 743 transitions. Second operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-07-19 17:26:35,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:36,000 INFO L93 Difference]: Finished difference Result 1703 states and 2381 transitions. [2022-07-19 17:26:36,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-19 17:26:36,000 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 96 [2022-07-19 17:26:36,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:36,007 INFO L225 Difference]: With dead ends: 1703 [2022-07-19 17:26:36,007 INFO L226 Difference]: Without dead ends: 1292 [2022-07-19 17:26:36,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2022-07-19 17:26:36,010 INFO L413 NwaCegarLoop]: 218 mSDtfsCounter, 1049 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 882 mSolverCounterSat, 506 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1057 SdHoareTripleChecker+Valid, 756 SdHoareTripleChecker+Invalid, 1388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 506 IncrementalHoareTripleChecker+Valid, 882 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:36,010 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1057 Valid, 756 Invalid, 1388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [506 Valid, 882 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-19 17:26:36,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1292 states. [2022-07-19 17:26:36,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1292 to 1169. [2022-07-19 17:26:36,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2022-07-19 17:26:36,060 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1579 transitions. [2022-07-19 17:26:36,061 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1579 transitions. Word has length 96 [2022-07-19 17:26:36,061 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:36,061 INFO L495 AbstractCegarLoop]: Abstraction has 1169 states and 1579 transitions. [2022-07-19 17:26:36,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-07-19 17:26:36,061 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1579 transitions. [2022-07-19 17:26:36,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-07-19 17:26:36,063 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:36,063 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:36,063 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:26:36,064 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:36,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:36,064 INFO L85 PathProgramCache]: Analyzing trace with hash -387681602, now seen corresponding path program 1 times [2022-07-19 17:26:36,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:36,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303119408] [2022-07-19 17:26:36,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:36,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:36,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:36,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:36,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:36,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:36,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:36,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:36,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-19 17:26:36,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-19 17:26:36,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:36,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:36,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-07-19 17:26:36,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-19 17:26:36,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,174 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-19 17:26:36,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:36,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303119408] [2022-07-19 17:26:36,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303119408] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:36,174 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:36,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:26:36,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29141274] [2022-07-19 17:26:36,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:36,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:26:36,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:36,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:26:36,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:26:36,176 INFO L87 Difference]: Start difference. First operand 1169 states and 1579 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-07-19 17:26:36,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:36,492 INFO L93 Difference]: Finished difference Result 1932 states and 2592 transitions. [2022-07-19 17:26:36,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-19 17:26:36,493 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) Word has length 127 [2022-07-19 17:26:36,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:36,496 INFO L225 Difference]: With dead ends: 1932 [2022-07-19 17:26:36,496 INFO L226 Difference]: Without dead ends: 786 [2022-07-19 17:26:36,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-07-19 17:26:36,501 INFO L413 NwaCegarLoop]: 201 mSDtfsCounter, 340 mSDsluCounter, 313 mSDsCounter, 0 mSdLazyCounter, 360 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 514 SdHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 360 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:36,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 514 Invalid, 497 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 360 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:26:36,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 786 states. [2022-07-19 17:26:36,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 786 to 754. [2022-07-19 17:26:36,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2022-07-19 17:26:36,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 754 states to 754 states and 994 transitions. [2022-07-19 17:26:36,532 INFO L78 Accepts]: Start accepts. Automaton has 754 states and 994 transitions. Word has length 127 [2022-07-19 17:26:36,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:36,532 INFO L495 AbstractCegarLoop]: Abstraction has 754 states and 994 transitions. [2022-07-19 17:26:36,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2022-07-19 17:26:36,532 INFO L276 IsEmpty]: Start isEmpty. Operand 754 states and 994 transitions. [2022-07-19 17:26:36,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2022-07-19 17:26:36,534 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:36,534 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:36,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:26:36,534 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:36,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:36,535 INFO L85 PathProgramCache]: Analyzing trace with hash 534729444, now seen corresponding path program 1 times [2022-07-19 17:26:36,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:36,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766009288] [2022-07-19 17:26:36,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:36,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:36,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:36,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:36,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:36,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:36,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:36,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:36,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-19 17:26:36,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-19 17:26:36,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:36,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:36,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-07-19 17:26:36,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-07-19 17:26:36,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:36,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-07-19 17:26:36,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,701 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 21 proven. 5 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-07-19 17:26:36,701 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:36,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766009288] [2022-07-19 17:26:36,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1766009288] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:36,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [940693786] [2022-07-19 17:26:36,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:36,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:36,702 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:36,704 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:36,705 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:26:36,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:36,818 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-19 17:26:36,825 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:36,908 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-07-19 17:26:36,909 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:26:36,909 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [940693786] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:36,909 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:26:36,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-19 17:26:36,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663029827] [2022-07-19 17:26:36,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:36,910 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:26:36,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:36,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:26:36,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:26:36,911 INFO L87 Difference]: Start difference. First operand 754 states and 994 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-19 17:26:36,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:36,969 INFO L93 Difference]: Finished difference Result 1671 states and 2245 transitions. [2022-07-19 17:26:36,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:26:36,970 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 136 [2022-07-19 17:26:36,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:36,974 INFO L225 Difference]: With dead ends: 1671 [2022-07-19 17:26:36,974 INFO L226 Difference]: Without dead ends: 940 [2022-07-19 17:26:36,977 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:26:36,977 INFO L413 NwaCegarLoop]: 249 mSDtfsCounter, 94 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:36,978 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 350 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:36,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2022-07-19 17:26:37,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 940. [2022-07-19 17:26:37,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2022-07-19 17:26:37,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 940 states and 1225 transitions. [2022-07-19 17:26:37,021 INFO L78 Accepts]: Start accepts. Automaton has 940 states and 1225 transitions. Word has length 136 [2022-07-19 17:26:37,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:37,022 INFO L495 AbstractCegarLoop]: Abstraction has 940 states and 1225 transitions. [2022-07-19 17:26:37,022 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-19 17:26:37,022 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1225 transitions. [2022-07-19 17:26:37,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-07-19 17:26:37,025 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:37,025 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:37,063 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:37,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:26:37,244 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:37,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:37,245 INFO L85 PathProgramCache]: Analyzing trace with hash -727153918, now seen corresponding path program 1 times [2022-07-19 17:26:37,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:37,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938963157] [2022-07-19 17:26:37,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:37,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:37,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:26:37,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:37,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:37,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:37,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:37,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:37,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-19 17:26:37,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-19 17:26:37,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:37,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:37,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:37,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-19 17:26:37,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-07-19 17:26:37,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-07-19 17:26:37,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:37,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:37,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2022-07-19 17:26:37,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,414 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 9 proven. 22 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-19 17:26:37,414 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:37,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938963157] [2022-07-19 17:26:37,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938963157] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:37,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [974861635] [2022-07-19 17:26:37,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:37,415 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:37,415 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:37,416 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:37,417 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:26:37,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:37,582 INFO L263 TraceCheckSpWp]: Trace formula consists of 610 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-19 17:26:37,593 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:37,766 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 28 proven. 12 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-07-19 17:26:37,766 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:37,960 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 20 proven. 11 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-07-19 17:26:37,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [974861635] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:37,961 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:37,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-07-19 17:26:37,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1403248575] [2022-07-19 17:26:37,961 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:37,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-07-19 17:26:37,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:37,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-07-19 17:26:37,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:26:37,963 INFO L87 Difference]: Start difference. First operand 940 states and 1225 transitions. Second operand has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-07-19 17:26:39,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:39,559 INFO L93 Difference]: Finished difference Result 1829 states and 2443 transitions. [2022-07-19 17:26:39,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-07-19 17:26:39,563 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) Word has length 138 [2022-07-19 17:26:39,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:39,564 INFO L225 Difference]: With dead ends: 1829 [2022-07-19 17:26:39,564 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:26:39,578 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 366 GetRequests, 320 SyntacticMatches, 1 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 567 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2022-07-19 17:26:39,579 INFO L413 NwaCegarLoop]: 311 mSDtfsCounter, 724 mSDsluCounter, 1061 mSDsCounter, 0 mSdLazyCounter, 1317 mSolverCounterSat, 410 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 731 SdHoareTripleChecker+Valid, 1372 SdHoareTripleChecker+Invalid, 1727 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 410 IncrementalHoareTripleChecker+Valid, 1317 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:39,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [731 Valid, 1372 Invalid, 1727 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [410 Valid, 1317 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-07-19 17:26:39,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:26:39,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:26:39,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:26:39,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:26:39,580 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 138 [2022-07-19 17:26:39,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:39,580 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:26:39,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2022-07-19 17:26:39,580 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:26:39,580 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:26:39,582 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:26:39,631 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:39,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-19 17:26:39,813 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:26:50,265 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 985 992) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,266 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 985 992) no Hoare annotation was computed. [2022-07-19 17:26:50,266 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 985 992) no Hoare annotation was computed. [2022-07-19 17:26:50,266 INFO L899 garLoopResultBuilder]: For program point activatePump__before__methaneQueryFINAL(lines 943 950) no Hoare annotation was computed. [2022-07-19 17:26:50,266 INFO L895 garLoopResultBuilder]: At program point activatePump__before__methaneQueryENTRY(lines 943 950) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0)) (= 0 ~__SELECTED_FEATURE_highWaterSensor~0) (not (<= ~waterLevel~0 2))) [2022-07-19 17:26:50,267 INFO L899 garLoopResultBuilder]: For program point activatePump__before__methaneQueryEXIT(lines 943 950) no Hoare annotation was computed. [2022-07-19 17:26:50,267 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 1004 1012) no Hoare annotation was computed. [2022-07-19 17:26:50,267 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 1004 1012) the Hoare annotation is: true [2022-07-19 17:26:50,267 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 1004 1012) no Hoare annotation was computed. [2022-07-19 17:26:50,267 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-07-19 17:26:50,267 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2022-07-19 17:26:50,267 INFO L895 garLoopResultBuilder]: At program point L1064(lines 1049 1067) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse2 (not .cse3))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse5 .cse6 .cse9 .cse7 .cse2)) (.cse1 (not .cse7)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (and .cse5 .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse7 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)) .cse8 .cse1 .cse3 .cse4) (or .cse0 .cse8 .cse1 (not .cse9) .cse4))))) [2022-07-19 17:26:50,268 INFO L895 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not .cse1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse0 (not (<= 2 ~waterLevel~0)) .cse2 .cse4) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse4))))) [2022-07-19 17:26:50,268 INFO L895 garLoopResultBuilder]: At program point L962(line 962) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-07-19 17:26:50,268 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,268 INFO L895 garLoopResultBuilder]: At program point L962-1(lines 951 967) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2022-07-19 17:26:50,268 INFO L895 garLoopResultBuilder]: At program point L834-1(lines 815 839) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not .cse1))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 (not .cse4) .cse2 .cse5) (or .cse3 (= ~pumpRunning~0 0) (and (<= 1 ~pumpRunning~0) .cse4) .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse5))))) [2022-07-19 17:26:50,269 INFO L895 garLoopResultBuilder]: At program point processEnvironment__before__lowWaterSensorENTRY(lines 840 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,269 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2022-07-19 17:26:50,269 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorFINAL(lines 840 856) no Hoare annotation was computed. [2022-07-19 17:26:50,269 INFO L899 garLoopResultBuilder]: For program point L149(lines 149 155) no Hoare annotation was computed. [2022-07-19 17:26:50,269 INFO L895 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2022-07-19 17:26:50,269 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse4 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse1))) [2022-07-19 17:26:50,269 INFO L895 garLoopResultBuilder]: At program point L979-1(lines 968 984) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2022-07-19 17:26:50,269 INFO L899 garLoopResultBuilder]: For program point L1058(lines 1058 1062) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorEXIT(lines 840 856) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L899 garLoopResultBuilder]: For program point L1058-2(lines 1058 1062) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L895 garLoopResultBuilder]: At program point L154(lines 145 158) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse3)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse8)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7 .cse8 .cse2 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse4 .cse5 (and .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1))) (or .cse0 .cse1 (not .cse7) .cse4 .cse5))))) [2022-07-19 17:26:50,270 INFO L899 garLoopResultBuilder]: For program point L823(lines 823 831) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 836) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 982) no Hoare annotation was computed. [2022-07-19 17:26:50,270 INFO L902 garLoopResultBuilder]: At program point select_oneENTRY(lines 274 283) the Hoare annotation is: true [2022-07-19 17:26:50,271 INFO L899 garLoopResultBuilder]: For program point select_oneFINAL(lines 274 283) no Hoare annotation was computed. [2022-07-19 17:26:50,271 INFO L899 garLoopResultBuilder]: For program point select_oneEXIT(lines 274 283) no Hoare annotation was computed. [2022-07-19 17:26:50,271 INFO L899 garLoopResultBuilder]: For program point L96-1(lines 92 103) no Hoare annotation was computed. [2022-07-19 17:26:50,271 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 92 103) the Hoare annotation is: true [2022-07-19 17:26:50,271 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 92 103) no Hoare annotation was computed. [2022-07-19 17:26:50,271 INFO L899 garLoopResultBuilder]: For program point L1142(lines 1142 1152) no Hoare annotation was computed. [2022-07-19 17:26:50,272 INFO L899 garLoopResultBuilder]: For program point L787(lines 787 793) no Hoare annotation was computed. [2022-07-19 17:26:50,272 INFO L895 garLoopResultBuilder]: At program point L915(line 915) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-07-19 17:26:50,272 INFO L899 garLoopResultBuilder]: For program point L1138(lines 1138 1155) no Hoare annotation was computed. [2022-07-19 17:26:50,272 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 783 805) no Hoare annotation was computed. [2022-07-19 17:26:50,272 INFO L895 garLoopResultBuilder]: At program point L1138-1(lines 1130 1158) the Hoare annotation is: (let ((.cse6 (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (= 1 ~systemActive~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse10 (<= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse12 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (<= 2 ~waterLevel~0) .cse2 .cse8 .cse9 (not .cse14) .cse10)) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not .cse2)) (.cse16 (not (<= 1 |old(~pumpRunning~0)|))) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~waterLevel~0 1)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or .cse0 (and .cse6 .cse1 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse13) (or (and .cse1 .cse2 .cse9) .cse0 .cse5 .cse14 .cse15 .cse11) (or .cse0 (and .cse1 .cse9) .cse14 .cse11 .cse12) (or .cse0 .cse4 (and .cse1 .cse3) .cse12) (or .cse0 .cse5 .cse15 .cse11 (and .cse6 .cse1 .cse7 .cse2 .cse8 .cse9 .cse10) .cse13) (let ((.cse17 (<= ~waterLevel~0 2))) (or .cse5 .cse16 .cse14 (and .cse1 .cse2 .cse17 .cse18) .cse11 (and .cse19 .cse17 .cse18) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or (and .cse1 .cse2 .cse3 .cse18) .cse5 .cse16 .cse14 (and .cse19 .cse3 .cse18) .cse11 .cse13)))) [2022-07-19 17:26:50,272 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-07-19 17:26:50,273 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-07-19 17:26:50,273 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2022-07-19 17:26:50,274 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 780 806) no Hoare annotation was computed. [2022-07-19 17:26:50,274 INFO L895 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse2 .cse8 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse2 (and .cse9 (= ~waterLevel~0 1))) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse8 .cse3 .cse4 .cse7)))) [2022-07-19 17:26:50,274 INFO L895 garLoopResultBuilder]: At program point L920-1(lines 901 925) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2022-07-19 17:26:50,274 INFO L899 garLoopResultBuilder]: For program point L1143(lines 1143 1149) no Hoare annotation was computed. [2022-07-19 17:26:50,274 INFO L895 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse9 (= ~waterLevel~0 1)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse0 .cse6 .cse2 (and .cse8 .cse9)) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse10 .cse3 (and .cse11 .cse9 .cse12) .cse4 .cse7) (or .cse2 .cse10 .cse3 .cse4 (and .cse11 (<= ~waterLevel~0 2) .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-19 17:26:50,274 INFO L895 garLoopResultBuilder]: At program point L937-1(lines 926 942) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2022-07-19 17:26:50,274 INFO L895 garLoopResultBuilder]: At program point L1127(lines 1120 1129) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (and .cse12 .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse12 (= ~waterLevel~0 1))) (.cse8 (not (= 0 ~systemActive~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse3 .cse4) (or .cse6 .cse7 .cse1 .cse4 .cse5) (or .cse6 .cse7 .cse4 .cse8 .cse5) (or .cse6 .cse9 .cse1 .cse10) (or .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse6 .cse9 .cse10 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-19 17:26:50,275 INFO L899 garLoopResultBuilder]: For program point L322(line 322) no Hoare annotation was computed. [2022-07-19 17:26:50,275 INFO L895 garLoopResultBuilder]: At program point L1140(line 1140) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse12 (and .cse10 .cse7)) (.cse13 (not (= 0 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse3 (and .cse6 .cse7 .cse8) .cse4 .cse9 (and .cse10 .cse7 .cse8)) (or .cse0 .cse11 .cse2 .cse12) (or .cse0 .cse4 .cse13 .cse9) (or .cse0 .cse1 .cse3 .cse4 .cse13) (or .cse0 .cse11 .cse12 .cse13) (let ((.cse14 (<= ~waterLevel~0 2))) (or .cse2 .cse5 .cse3 (and .cse10 .cse14 .cse8) .cse4 (and .cse6 .cse14 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 .cse2 .cse4 .cse9)))) [2022-07-19 17:26:50,275 INFO L899 garLoopResultBuilder]: For program point L1140-1(line 1140) no Hoare annotation was computed. [2022-07-19 17:26:50,275 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 917) no Hoare annotation was computed. [2022-07-19 17:26:50,275 INFO L895 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse18 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse20 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= ~pumpRunning~0 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse13 .cse19)) (.cse0 (and .cse13 .cse18 .cse19 .cse20)) (.cse8 (and (<= 1 ~pumpRunning~0) .cse18 (<= 2 ~waterLevel~0) .cse17 .cse16 .cse19 (not .cse7) .cse20)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse15 (and .cse13 .cse11)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not .cse17)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse6 .cse7 .cse2 .cse8) (or .cse6 .cse9 .cse7 (and .cse10 .cse11 .cse12) .cse2 .cse4 (and .cse13 .cse11 .cse12)) (or .cse1 .cse14 .cse6 .cse15) (or .cse1 .cse5 .cse7 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse2 .cse8 .cse4) (or .cse1 .cse14 .cse15 .cse3) (or .cse6 .cse9 .cse7 (and .cse13 .cse16 .cse12) .cse2 (and .cse10 .cse16 .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-19 17:26:50,275 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 922) no Hoare annotation was computed. [2022-07-19 17:26:50,275 INFO L895 garLoopResultBuilder]: At program point L323(lines 318 325) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse3 .cse7) (or .cse5 .cse6 .cse1 .cse2 .cse7) (or .cse0 .cse5 .cse1 .cse2) (or .cse0 .cse4 .cse5) (or .cse0 .cse5 .cse2 .cse7))) [2022-07-19 17:26:50,275 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 940) no Hoare annotation was computed. [2022-07-19 17:26:50,276 INFO L899 garLoopResultBuilder]: For program point L794-1(lines 794 800) no Hoare annotation was computed. [2022-07-19 17:26:50,276 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 780 806) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2022-07-19 17:26:50,276 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 780 806) no Hoare annotation was computed. [2022-07-19 17:26:50,276 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 322) no Hoare annotation was computed. [2022-07-19 17:26:50,276 INFO L899 garLoopResultBuilder]: For program point L72(lines 72 76) no Hoare annotation was computed. [2022-07-19 17:26:50,276 INFO L895 garLoopResultBuilder]: At program point L72-2(lines 68 79) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2022-07-19 17:26:50,276 INFO L895 garLoopResultBuilder]: At program point L1125(line 1125) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2022-07-19 17:26:50,276 INFO L899 garLoopResultBuilder]: For program point L1125-1(line 1125) no Hoare annotation was computed. [2022-07-19 17:26:50,277 INFO L899 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2022-07-19 17:26:50,277 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 171 200) no Hoare annotation was computed. [2022-07-19 17:26:50,277 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 171 200) the Hoare annotation is: true [2022-07-19 17:26:50,277 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 189) no Hoare annotation was computed. [2022-07-19 17:26:50,277 INFO L902 garLoopResultBuilder]: At program point L185-1(lines 185 189) the Hoare annotation is: true [2022-07-19 17:26:50,277 INFO L899 garLoopResultBuilder]: For program point L182(line 182) no Hoare annotation was computed. [2022-07-19 17:26:50,278 INFO L902 garLoopResultBuilder]: At program point L181-2(lines 181 195) the Hoare annotation is: true [2022-07-19 17:26:50,278 INFO L902 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: true [2022-07-19 17:26:50,278 INFO L899 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2022-07-19 17:26:50,278 INFO L902 garLoopResultBuilder]: At program point L196(lines 171 200) the Hoare annotation is: true [2022-07-19 17:26:50,278 INFO L902 garLoopResultBuilder]: At program point processEnvironment__before__highWaterSensorFINAL(lines 807 813) the Hoare annotation is: true [2022-07-19 17:26:50,278 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__highWaterSensorEXIT(lines 807 813) no Hoare annotation was computed. [2022-07-19 17:26:50,278 INFO L895 garLoopResultBuilder]: At program point L1117(lines 1112 1119) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,280 INFO L895 garLoopResultBuilder]: At program point L1093(line 1093) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2022-07-19 17:26:50,280 INFO L895 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,280 INFO L899 garLoopResultBuilder]: For program point L292-1(line 292) no Hoare annotation was computed. [2022-07-19 17:26:50,280 INFO L899 garLoopResultBuilder]: For program point L259(lines 259 266) no Hoare annotation was computed. [2022-07-19 17:26:50,280 INFO L899 garLoopResultBuilder]: For program point L259-2(lines 259 266) no Hoare annotation was computed. [2022-07-19 17:26:50,280 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:26:50,280 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:26:50,280 INFO L895 garLoopResultBuilder]: At program point L763(lines 704 764) the Hoare annotation is: false [2022-07-19 17:26:50,280 INFO L902 garLoopResultBuilder]: At program point L243(lines 235 245) the Hoare annotation is: true [2022-07-19 17:26:50,281 INFO L902 garLoopResultBuilder]: At program point L268(lines 249 271) the Hoare annotation is: true [2022-07-19 17:26:50,281 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 757) no Hoare annotation was computed. [2022-07-19 17:26:50,281 INFO L895 garLoopResultBuilder]: At program point L747-1(lines 735 758) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-07-19 17:26:50,281 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,281 INFO L899 garLoopResultBuilder]: For program point L293-1(line 293) no Hoare annotation was computed. [2022-07-19 17:26:50,281 INFO L899 garLoopResultBuilder]: For program point L706(lines 705 762) no Hoare annotation was computed. [2022-07-19 17:26:50,281 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2022-07-19 17:26:50,281 INFO L899 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2022-07-19 17:26:50,282 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2022-07-19 17:26:50,282 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,283 INFO L899 garLoopResultBuilder]: For program point L294-1(line 294) no Hoare annotation was computed. [2022-07-19 17:26:50,283 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2022-07-19 17:26:50,283 INFO L895 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,283 INFO L899 garLoopResultBuilder]: For program point L295-1(line 295) no Hoare annotation was computed. [2022-07-19 17:26:50,283 INFO L902 garLoopResultBuilder]: At program point L766(lines 695 770) the Hoare annotation is: true [2022-07-19 17:26:50,283 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2022-07-19 17:26:50,283 INFO L899 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2022-07-19 17:26:50,284 INFO L895 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-07-19 17:26:50,284 INFO L895 garLoopResultBuilder]: At program point L230(lines 226 232) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,284 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:26:50,284 INFO L895 garLoopResultBuilder]: At program point L313(lines 308 316) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,284 INFO L895 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,284 INFO L895 garLoopResultBuilder]: At program point L297(lines 284 299) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:26:50,285 INFO L899 garLoopResultBuilder]: For program point L735(lines 735 758) no Hoare annotation was computed. [2022-07-19 17:26:50,285 INFO L895 garLoopResultBuilder]: At program point L760(lines 705 762) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-07-19 17:26:50,285 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2022-07-19 17:26:50,285 INFO L895 garLoopResultBuilder]: At program point L1107(lines 1102 1109) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse6 .cse5 .cse1 .cse2 .cse3 .cse4))) [2022-07-19 17:26:50,285 INFO L895 garLoopResultBuilder]: At program point L1099(lines 1087 1101) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) .cse3))) [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L1091(lines 1091 1097) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L895 garLoopResultBuilder]: At program point L290(line 290) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L1091-1(lines 1091 1097) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L290-1(line 290) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L291-1(line 291) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 80 91) no Hoare annotation was computed. [2022-07-19 17:26:50,286 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 80 91) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse4) (or .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse8) (or .cse1 .cse6 .cse9 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse0 .cse7 .cse8 .cse5) (or .cse1 .cse6 .cse9 .cse2 .cse3 .cse4))) [2022-07-19 17:26:50,286 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 80 91) no Hoare annotation was computed. [2022-07-19 17:26:50,287 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,287 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmEXIT(lines 883 899) no Hoare annotation was computed. [2022-07-19 17:26:50,287 INFO L895 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,287 INFO L895 garLoopResultBuilder]: At program point L164(lines 159 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,287 INFO L895 garLoopResultBuilder]: At program point L868(line 868) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,287 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2022-07-19 17:26:50,287 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmFINAL(lines 883 899) no Hoare annotation was computed. [2022-07-19 17:26:50,287 INFO L899 garLoopResultBuilder]: For program point L862(lines 862 879) no Hoare annotation was computed. [2022-07-19 17:26:50,288 INFO L895 garLoopResultBuilder]: At program point L1083(lines 1068 1086) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,288 INFO L895 garLoopResultBuilder]: At program point processEnvironment__before__methaneAlarmENTRY(lines 883 899) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:50,288 INFO L899 garLoopResultBuilder]: For program point L1077(lines 1077 1081) no Hoare annotation was computed. [2022-07-19 17:26:50,288 INFO L899 garLoopResultBuilder]: For program point L1077-2(lines 1077 1081) no Hoare annotation was computed. [2022-07-19 17:26:50,288 INFO L895 garLoopResultBuilder]: At program point L877(line 877) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse4 .cse0) (or .cse3 .cse4 .cse0 .cse1 .cse2))) [2022-07-19 17:26:50,288 INFO L895 garLoopResultBuilder]: At program point L877-1(lines 858 882) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not .cse7)) (.cse5 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (not .cse2))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse1) (or .cse4 .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse1 (not .cse6) .cse5 .cse3)))) [2022-07-19 17:26:50,288 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 993 1003) the Hoare annotation is: true [2022-07-19 17:26:50,288 INFO L902 garLoopResultBuilder]: At program point L109(lines 104 112) the Hoare annotation is: true [2022-07-19 17:26:50,289 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 993 1003) no Hoare annotation was computed. [2022-07-19 17:26:50,289 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 993 1003) no Hoare annotation was computed. [2022-07-19 17:26:50,292 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:50,293 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:26:50,333 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:26:50 BoogieIcfgContainer [2022-07-19 17:26:50,333 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:26:50,334 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:26:50,334 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:26:50,334 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:26:50,334 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:32" (3/4) ... [2022-07-19 17:26:50,336 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:26:50,340 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-19 17:26:50,341 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure activatePump__before__methaneQuery [2022-07-19 17:26:50,341 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-19 17:26:50,341 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__lowWaterSensor [2022-07-19 17:26:50,341 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure select_one [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__highWaterSensor [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__methaneAlarm [2022-07-19 17:26:50,342 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-19 17:26:50,348 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-07-19 17:26:50,351 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:26:50,351 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:26:50,352 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:26:50,352 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:26:50,352 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:26:50,353 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:26:50,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-19 17:26:50,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-19 17:26:50,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-07-19 17:26:50,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-19 17:26:50,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-07-19 17:26:50,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-19 17:26:50,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-07-19 17:26:50,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2022-07-19 17:26:50,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-19 17:26:50,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-07-19 17:26:50,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) [2022-07-19 17:26:50,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-07-19 17:26:50,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2022-07-19 17:26:50,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2022-07-19 17:26:50,379 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) [2022-07-19 17:26:50,416 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:26:50,416 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:26:50,417 INFO L158 Benchmark]: Toolchain (without parser) took 18931.60ms. Allocated memory was 109.1MB in the beginning and 264.2MB in the end (delta: 155.2MB). Free memory was 69.5MB in the beginning and 157.5MB in the end (delta: -88.1MB). Peak memory consumption was 65.8MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,417 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 109.1MB. Free memory is still 87.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:26:50,419 INFO L158 Benchmark]: CACSL2BoogieTranslator took 454.87ms. Allocated memory is still 109.1MB. Free memory was 69.2MB in the beginning and 74.7MB in the end (delta: -5.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,419 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.44ms. Allocated memory is still 109.1MB. Free memory was 74.2MB in the beginning and 71.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,419 INFO L158 Benchmark]: Boogie Preprocessor took 36.10ms. Allocated memory is still 109.1MB. Free memory was 71.6MB in the beginning and 70.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,420 INFO L158 Benchmark]: RCFGBuilder took 512.20ms. Allocated memory is still 109.1MB. Free memory was 69.5MB in the beginning and 49.0MB in the end (delta: 20.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,420 INFO L158 Benchmark]: TraceAbstraction took 17779.75ms. Allocated memory was 109.1MB in the beginning and 264.2MB in the end (delta: 155.2MB). Free memory was 48.5MB in the beginning and 164.9MB in the end (delta: -116.3MB). Peak memory consumption was 125.3MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,420 INFO L158 Benchmark]: Witness Printer took 82.88ms. Allocated memory is still 264.2MB. Free memory was 164.9MB in the beginning and 157.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:26:50,422 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 109.1MB. Free memory is still 87.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 454.87ms. Allocated memory is still 109.1MB. Free memory was 69.2MB in the beginning and 74.7MB in the end (delta: -5.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.44ms. Allocated memory is still 109.1MB. Free memory was 74.2MB in the beginning and 71.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.10ms. Allocated memory is still 109.1MB. Free memory was 71.6MB in the beginning and 70.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 512.20ms. Allocated memory is still 109.1MB. Free memory was 69.5MB in the beginning and 49.0MB in the end (delta: 20.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 17779.75ms. Allocated memory was 109.1MB in the beginning and 264.2MB in the end (delta: 155.2MB). Free memory was 48.5MB in the beginning and 164.9MB in the end (delta: -116.3MB). Peak memory consumption was 125.3MB. Max. memory is 16.1GB. * Witness Printer took 82.88ms. Allocated memory is still 264.2MB. Free memory was 164.9MB in the beginning and 157.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 322]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 148 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.7s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3011 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2953 mSDsluCounter, 6486 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4212 mSDsCounter, 1255 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3326 IncrementalHoareTripleChecker+Invalid, 4581 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1255 mSolverCounterUnsat, 2274 mSDtfsCounter, 3326 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 827 GetRequests, 698 SyntacticMatches, 2 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 904 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1169occurred in iteration=8, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 344 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 71 LocationsWithAnnotation, 4651 PreInvPairs, 5184 NumberOfFragments, 5849 HoareAnnotationTreeSize, 4651 FomulaSimplifications, 6007 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 71 FomulaSimplificationsInter, 22625 FormulaSimplificationTreeSizeReductionInter, 9.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 1312 NumberOfCodeBlocks, 1312 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1436 ConstructedInterpolants, 0 QuantifiedInterpolants, 2650 SizeOfPredicates, 3 NumberOfNonLiveVariables, 1219 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 14 InterpolantComputations, 10 PerfectInterpolantSequences, 827/877 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1120]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1130]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 68]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 318]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 1087]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 1068]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 1049]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) - InvariantResult [Line: 1112]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2022-07-19 17:26:50,457 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE