./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:01:33,593 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:01:33,595 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:01:33,644 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:01:33,645 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:01:33,647 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:01:33,648 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:01:33,650 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:01:33,652 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:01:33,655 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:01:33,656 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:01:33,657 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:01:33,657 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:01:33,659 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:01:33,660 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:01:33,663 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:01:33,664 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:01:33,665 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:01:33,666 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:01:33,671 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:01:33,672 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:01:33,673 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:01:33,674 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:01:33,675 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:01:33,680 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:01:33,680 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:01:33,680 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:01:33,681 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:01:33,682 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:01:33,682 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:01:33,682 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:01:33,683 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:01:33,684 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:01:33,685 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:01:33,686 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:01:33,686 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:01:33,688 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:01:33,689 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:01:33,689 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:01:33,690 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:01:33,690 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:01:33,691 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:01:33,717 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:01:33,717 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:01:33,718 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:01:33,718 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:01:33,719 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:01:33,719 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:01:33,719 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:01:33,720 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:01:33,720 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:01:33,720 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:01:33,721 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:01:33,721 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:01:33,721 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:01:33,721 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:01:33,721 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:01:33,722 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:01:33,723 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:01:33,723 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:01:33,723 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:01:33,723 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:33,723 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:01:33,723 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:01:33,724 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:01:33,724 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:01:33,724 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:01:33,724 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:01:33,724 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:01:33,725 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:01:33,725 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:01:33,725 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2021-12-16 01:01:33,940 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:01:33,957 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:01:33,959 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:01:33,960 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:01:33,960 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:01:33,961 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2021-12-16 01:01:34,008 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fac4f6e8/613945cd490e4ad9ab9a6e24746444a2/FLAGa1a77d3d6 [2021-12-16 01:01:34,446 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:01:34,454 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2021-12-16 01:01:34,469 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fac4f6e8/613945cd490e4ad9ab9a6e24746444a2/FLAGa1a77d3d6 [2021-12-16 01:01:34,481 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fac4f6e8/613945cd490e4ad9ab9a6e24746444a2 [2021-12-16 01:01:34,483 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:01:34,484 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:01:34,486 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:34,486 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:01:34,488 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:01:34,488 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:34" (1/1) ... [2021-12-16 01:01:34,489 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@51095110 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:34, skipping insertion in model container [2021-12-16 01:01:34,489 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:34" (1/1) ... [2021-12-16 01:01:34,494 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:01:34,533 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:01:34,798 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2021-12-16 01:01:34,910 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:34,938 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:01:34,993 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2021-12-16 01:01:35,017 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:35,028 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:01:35,028 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35 WrapperNode [2021-12-16 01:01:35,029 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:35,029 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:35,030 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:01:35,030 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:01:35,034 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,056 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,090 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 294 [2021-12-16 01:01:35,090 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:35,091 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:01:35,091 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:01:35,091 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:01:35,097 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,097 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,098 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,098 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,102 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,106 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,113 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,116 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:01:35,119 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:01:35,120 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:01:35,120 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:01:35,121 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (1/1) ... [2021-12-16 01:01:35,129 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:35,137 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:35,149 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:01:35,152 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:01:35,205 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:01:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:01:35,206 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:01:35,206 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:01:35,207 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:01:35,207 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:01:35,207 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:01:35,210 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:35,210 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:35,210 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:01:35,211 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:01:35,211 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:35,211 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:35,211 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-16 01:01:35,211 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-16 01:01:35,211 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:01:35,211 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:01:35,211 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:01:35,212 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:01:35,212 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:01:35,212 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:01:35,212 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:01:35,315 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:01:35,317 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:01:35,596 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:01:35,601 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:01:35,601 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:01:35,602 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:35 BoogieIcfgContainer [2021-12-16 01:01:35,602 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:01:35,603 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:01:35,605 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:01:35,607 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:01:35,608 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:01:34" (1/3) ... [2021-12-16 01:01:35,608 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@bedf559 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:35, skipping insertion in model container [2021-12-16 01:01:35,608 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:35" (2/3) ... [2021-12-16 01:01:35,609 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@bedf559 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:35, skipping insertion in model container [2021-12-16 01:01:35,609 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:35" (3/3) ... [2021-12-16 01:01:35,609 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2021-12-16 01:01:35,614 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:01:35,615 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:01:35,647 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:01:35,652 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:01:35,653 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:01:35,674 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-16 01:01:35,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 01:01:35,696 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:35,697 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:35,698 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:35,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:35,702 INFO L85 PathProgramCache]: Analyzing trace with hash 2077500872, now seen corresponding path program 1 times [2021-12-16 01:01:35,709 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:35,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421673740] [2021-12-16 01:01:35,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:35,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:35,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 01:01:36,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:36,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,048 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:36,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:36,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421673740] [2021-12-16 01:01:36,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421673740] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:36,050 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:36,051 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:01:36,052 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [995754156] [2021-12-16 01:01:36,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:36,055 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:01:36,056 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:36,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:01:36,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:36,126 INFO L87 Difference]: Start difference. First operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,175 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2021-12-16 01:01:36,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:01:36,192 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-16 01:01:36,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,204 INFO L225 Difference]: With dead ends: 211 [2021-12-16 01:01:36,205 INFO L226 Difference]: Without dead ends: 101 [2021-12-16 01:01:36,209 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:36,211 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,212 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:36,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2021-12-16 01:01:36,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2021-12-16 01:01:36,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 01:01:36,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2021-12-16 01:01:36,303 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 32 [2021-12-16 01:01:36,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:36,304 INFO L470 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2021-12-16 01:01:36,304 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,304 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2021-12-16 01:01:36,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-16 01:01:36,308 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:36,308 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:36,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:01:36,310 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:36,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:36,312 INFO L85 PathProgramCache]: Analyzing trace with hash 604529845, now seen corresponding path program 1 times [2021-12-16 01:01:36,316 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:36,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473818022] [2021-12-16 01:01:36,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:36,317 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:36,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 01:01:36,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 01:01:36,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,415 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:36,415 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:36,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473818022] [2021-12-16 01:01:36,416 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473818022] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:36,416 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:36,416 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:36,416 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1815369480] [2021-12-16 01:01:36,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:36,417 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:36,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:36,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:36,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:36,418 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,430 INFO L93 Difference]: Finished difference Result 162 states and 210 transitions. [2021-12-16 01:01:36,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:36,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-16 01:01:36,434 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,435 INFO L225 Difference]: With dead ends: 162 [2021-12-16 01:01:36,435 INFO L226 Difference]: Without dead ends: 92 [2021-12-16 01:01:36,435 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:36,436 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,437 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:36,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2021-12-16 01:01:36,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2021-12-16 01:01:36,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-16 01:01:36,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2021-12-16 01:01:36,469 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 33 [2021-12-16 01:01:36,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:36,470 INFO L470 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2021-12-16 01:01:36,470 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,470 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2021-12-16 01:01:36,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 01:01:36,472 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:36,472 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:36,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:01:36,473 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:36,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:36,473 INFO L85 PathProgramCache]: Analyzing trace with hash -1594505260, now seen corresponding path program 1 times [2021-12-16 01:01:36,473 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:36,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1588018117] [2021-12-16 01:01:36,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:36,473 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:36,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:36,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 01:01:36,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,530 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:36,530 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:36,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1588018117] [2021-12-16 01:01:36,530 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1588018117] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:36,530 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:36,530 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:36,531 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1326774998] [2021-12-16 01:01:36,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:36,531 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:36,531 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:36,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:36,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:36,532 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:36,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,604 INFO L93 Difference]: Finished difference Result 223 states and 292 transitions. [2021-12-16 01:01:36,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 01:01:36,608 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-16 01:01:36,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,609 INFO L225 Difference]: With dead ends: 223 [2021-12-16 01:01:36,609 INFO L226 Difference]: Without dead ends: 139 [2021-12-16 01:01:36,609 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 01:01:36,610 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 180 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,610 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [180 Valid, 401 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:36,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2021-12-16 01:01:36,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 136. [2021-12-16 01:01:36,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 102 states have (on average 1.3333333333333333) internal successors, (136), 115 states have internal predecessors, (136), 20 states have call successors, (20), 13 states have call predecessors, (20), 13 states have return successors, (21), 14 states have call predecessors, (21), 20 states have call successors, (21) [2021-12-16 01:01:36,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 177 transitions. [2021-12-16 01:01:36,631 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 177 transitions. Word has length 38 [2021-12-16 01:01:36,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:36,631 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 177 transitions. [2021-12-16 01:01:36,632 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:36,632 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 177 transitions. [2021-12-16 01:01:36,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-16 01:01:36,637 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:36,639 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:36,639 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:01:36,639 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:36,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:36,640 INFO L85 PathProgramCache]: Analyzing trace with hash -969732780, now seen corresponding path program 1 times [2021-12-16 01:01:36,640 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:36,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587142188] [2021-12-16 01:01:36,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:36,641 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:36,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-16 01:01:36,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-16 01:01:36,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,699 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 01:01:36,699 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:36,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587142188] [2021-12-16 01:01:36,700 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [587142188] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:36,700 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:36,700 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:36,700 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442344894] [2021-12-16 01:01:36,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:36,700 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:36,700 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:36,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:36,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:36,701 INFO L87 Difference]: Start difference. First operand 136 states and 177 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,851 INFO L93 Difference]: Finished difference Result 316 states and 425 transitions. [2021-12-16 01:01:36,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 01:01:36,851 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-16 01:01:36,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,853 INFO L225 Difference]: With dead ends: 316 [2021-12-16 01:01:36,855 INFO L226 Difference]: Without dead ends: 188 [2021-12-16 01:01:36,856 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 01:01:36,859 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 57 mSDsluCounter, 437 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 571 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,862 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 571 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:36,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2021-12-16 01:01:36,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 178. [2021-12-16 01:01:36,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 134 states have (on average 1.2686567164179106) internal successors, (170), 145 states have internal predecessors, (170), 24 states have call successors, (24), 19 states have call predecessors, (24), 19 states have return successors, (32), 22 states have call predecessors, (32), 24 states have call successors, (32) [2021-12-16 01:01:36,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 226 transitions. [2021-12-16 01:01:36,886 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 226 transitions. Word has length 41 [2021-12-16 01:01:36,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:36,887 INFO L470 AbstractCegarLoop]: Abstraction has 178 states and 226 transitions. [2021-12-16 01:01:36,887 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:36,888 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 226 transitions. [2021-12-16 01:01:36,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:36,889 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:36,889 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:36,889 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:01:36,889 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:36,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:36,890 INFO L85 PathProgramCache]: Analyzing trace with hash -1724941251, now seen corresponding path program 1 times [2021-12-16 01:01:36,890 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:36,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1575180162] [2021-12-16 01:01:36,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:36,891 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:36,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:36,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:36,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:36,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:36,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:36,976 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:36,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:36,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1575180162] [2021-12-16 01:01:36,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1575180162] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:36,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:36,977 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:36,977 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155537597] [2021-12-16 01:01:36,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:36,977 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:36,977 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:36,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:36,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:36,978 INFO L87 Difference]: Start difference. First operand 178 states and 226 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:37,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:37,159 INFO L93 Difference]: Finished difference Result 548 states and 730 transitions. [2021-12-16 01:01:37,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 01:01:37,160 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-16 01:01:37,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:37,162 INFO L225 Difference]: With dead ends: 548 [2021-12-16 01:01:37,162 INFO L226 Difference]: Without dead ends: 378 [2021-12-16 01:01:37,163 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-16 01:01:37,164 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 193 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:37,165 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [199 Valid, 489 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:37,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2021-12-16 01:01:37,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 347. [2021-12-16 01:01:37,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 262 states have (on average 1.248091603053435) internal successors, (327), 277 states have internal predecessors, (327), 45 states have call successors, (45), 35 states have call predecessors, (45), 39 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2021-12-16 01:01:37,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 440 transitions. [2021-12-16 01:01:37,187 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 440 transitions. Word has length 57 [2021-12-16 01:01:37,187 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:37,188 INFO L470 AbstractCegarLoop]: Abstraction has 347 states and 440 transitions. [2021-12-16 01:01:37,188 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:37,188 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 440 transitions. [2021-12-16 01:01:37,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:37,189 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:37,189 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:37,189 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:01:37,189 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:37,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:37,190 INFO L85 PathProgramCache]: Analyzing trace with hash 80497083, now seen corresponding path program 1 times [2021-12-16 01:01:37,190 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:37,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1213429292] [2021-12-16 01:01:37,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:37,190 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:37,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:37,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:37,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:37,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:37,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,243 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:37,243 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:37,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1213429292] [2021-12-16 01:01:37,243 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1213429292] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:37,243 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:37,243 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:37,243 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [782146038] [2021-12-16 01:01:37,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:37,244 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:37,244 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:37,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:37,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:37,245 INFO L87 Difference]: Start difference. First operand 347 states and 440 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:37,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:37,384 INFO L93 Difference]: Finished difference Result 700 states and 903 transitions. [2021-12-16 01:01:37,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:37,385 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-16 01:01:37,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:37,387 INFO L225 Difference]: With dead ends: 700 [2021-12-16 01:01:37,387 INFO L226 Difference]: Without dead ends: 361 [2021-12-16 01:01:37,388 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:37,389 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 76 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:37,389 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 460 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:37,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2021-12-16 01:01:37,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 353. [2021-12-16 01:01:37,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 268 states have (on average 1.242537313432836) internal successors, (333), 283 states have internal predecessors, (333), 45 states have call successors, (45), 35 states have call predecessors, (45), 39 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2021-12-16 01:01:37,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 446 transitions. [2021-12-16 01:01:37,407 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 446 transitions. Word has length 57 [2021-12-16 01:01:37,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:37,408 INFO L470 AbstractCegarLoop]: Abstraction has 353 states and 446 transitions. [2021-12-16 01:01:37,408 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:37,408 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 446 transitions. [2021-12-16 01:01:37,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 01:01:37,409 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:37,409 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:37,409 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 01:01:37,409 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:37,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:37,410 INFO L85 PathProgramCache]: Analyzing trace with hash 503198909, now seen corresponding path program 1 times [2021-12-16 01:01:37,410 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:37,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1772899078] [2021-12-16 01:01:37,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:37,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:37,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:37,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:37,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:37,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 01:01:37,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,457 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:37,457 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:37,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1772899078] [2021-12-16 01:01:37,457 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1772899078] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:37,457 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:37,457 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:37,458 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585979095] [2021-12-16 01:01:37,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:37,458 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:37,458 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:37,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:37,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:37,459 INFO L87 Difference]: Start difference. First operand 353 states and 446 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:37,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:37,544 INFO L93 Difference]: Finished difference Result 653 states and 842 transitions. [2021-12-16 01:01:37,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 01:01:37,545 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-16 01:01:37,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:37,547 INFO L225 Difference]: With dead ends: 653 [2021-12-16 01:01:37,547 INFO L226 Difference]: Without dead ends: 308 [2021-12-16 01:01:37,548 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:37,549 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 77 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:37,549 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 345 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:37,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2021-12-16 01:01:37,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 303. [2021-12-16 01:01:37,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 230 states have (on average 1.2260869565217392) internal successors, (282), 243 states have internal predecessors, (282), 39 states have call successors, (39), 30 states have call predecessors, (39), 33 states have return successors, (53), 39 states have call predecessors, (53), 39 states have call successors, (53) [2021-12-16 01:01:37,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 374 transitions. [2021-12-16 01:01:37,561 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 374 transitions. Word has length 57 [2021-12-16 01:01:37,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:37,562 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 374 transitions. [2021-12-16 01:01:37,562 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:37,562 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 374 transitions. [2021-12-16 01:01:37,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 01:01:37,563 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:37,563 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:37,563 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 01:01:37,563 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:37,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:37,564 INFO L85 PathProgramCache]: Analyzing trace with hash 924671973, now seen corresponding path program 1 times [2021-12-16 01:01:37,564 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:37,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1118804306] [2021-12-16 01:01:37,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:37,564 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:37,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:37,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:01:37,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-16 01:01:37,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:37,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-16 01:01:37,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,656 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:37,656 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:37,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1118804306] [2021-12-16 01:01:37,656 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1118804306] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:37,657 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:37,657 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:37,657 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366397514] [2021-12-16 01:01:37,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:37,657 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:37,658 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:37,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:37,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:37,658 INFO L87 Difference]: Start difference. First operand 303 states and 374 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:38,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:38,441 INFO L93 Difference]: Finished difference Result 1082 states and 1431 transitions. [2021-12-16 01:01:38,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-16 01:01:38,441 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-16 01:01:38,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:38,445 INFO L225 Difference]: With dead ends: 1082 [2021-12-16 01:01:38,445 INFO L226 Difference]: Without dead ends: 880 [2021-12-16 01:01:38,446 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-16 01:01:38,447 INFO L933 BasicCegarLoop]: 192 mSDtfsCounter, 609 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 1007 mSolverCounterSat, 233 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 619 SdHoareTripleChecker+Valid, 1004 SdHoareTripleChecker+Invalid, 1240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 233 IncrementalHoareTripleChecker+Valid, 1007 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:38,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [619 Valid, 1004 Invalid, 1240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [233 Valid, 1007 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 01:01:38,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 880 states. [2021-12-16 01:01:38,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 880 to 790. [2021-12-16 01:01:38,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2205387205387206) internal successors, (725), 633 states have internal predecessors, (725), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (164), 105 states have call predecessors, (164), 104 states have call successors, (164) [2021-12-16 01:01:38,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 993 transitions. [2021-12-16 01:01:38,490 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 993 transitions. Word has length 61 [2021-12-16 01:01:38,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:38,490 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 993 transitions. [2021-12-16 01:01:38,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:38,491 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 993 transitions. [2021-12-16 01:01:38,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-16 01:01:38,492 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:38,492 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:38,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 01:01:38,493 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:38,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:38,493 INFO L85 PathProgramCache]: Analyzing trace with hash -110034283, now seen corresponding path program 1 times [2021-12-16 01:01:38,493 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:38,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254434020] [2021-12-16 01:01:38,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:38,494 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:38,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:38,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:38,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:38,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:38,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:38,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-16 01:01:38,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-16 01:01:38,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:38,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:38,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-16 01:01:38,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,559 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-12-16 01:01:38,559 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:38,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254434020] [2021-12-16 01:01:38,559 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254434020] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:38,559 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:38,559 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:01:38,560 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [796745801] [2021-12-16 01:01:38,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:38,560 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:01:38,560 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:38,560 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:01:38,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:38,561 INFO L87 Difference]: Start difference. First operand 790 states and 993 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2021-12-16 01:01:38,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:38,771 INFO L93 Difference]: Finished difference Result 1608 states and 2017 transitions. [2021-12-16 01:01:38,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-16 01:01:38,771 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 114 [2021-12-16 01:01:38,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:38,774 INFO L225 Difference]: With dead ends: 1608 [2021-12-16 01:01:38,774 INFO L226 Difference]: Without dead ends: 826 [2021-12-16 01:01:38,776 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-16 01:01:38,776 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 345 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 223 mSolverCounterSat, 134 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 134 IncrementalHoareTripleChecker+Valid, 223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:38,777 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [354 Valid, 384 Invalid, 357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [134 Valid, 223 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:38,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2021-12-16 01:01:38,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 790. [2021-12-16 01:01:38,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 633 states have internal predecessors, (720), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (155), 105 states have call predecessors, (155), 104 states have call successors, (155) [2021-12-16 01:01:38,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 979 transitions. [2021-12-16 01:01:38,818 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 979 transitions. Word has length 114 [2021-12-16 01:01:38,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:38,819 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 979 transitions. [2021-12-16 01:01:38,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2021-12-16 01:01:38,819 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 979 transitions. [2021-12-16 01:01:38,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2021-12-16 01:01:38,820 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:38,820 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:38,820 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 01:01:38,821 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:38,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:38,821 INFO L85 PathProgramCache]: Analyzing trace with hash -726468575, now seen corresponding path program 1 times [2021-12-16 01:01:38,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:38,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1230600879] [2021-12-16 01:01:38,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:38,821 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:38,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:38,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:38,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:38,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:38,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:38,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-16 01:01:38,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-16 01:01:38,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:38,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:38,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-16 01:01:38,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:38,927 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:38,927 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:38,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1230600879] [2021-12-16 01:01:38,927 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1230600879] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:38,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2096055783] [2021-12-16 01:01:38,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:38,928 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:38,928 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:38,929 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:38,961 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 01:01:39,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:39,022 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 01:01:39,027 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:39,268 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:01:39,268 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:39,559 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:39,560 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2096055783] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:39,560 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:39,560 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-16 01:01:39,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621435341] [2021-12-16 01:01:39,561 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:39,561 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-16 01:01:39,561 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:39,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-16 01:01:39,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-16 01:01:39,562 INFO L87 Difference]: Start difference. First operand 790 states and 979 transitions. Second operand has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-12-16 01:01:40,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:40,778 INFO L93 Difference]: Finished difference Result 1794 states and 2291 transitions. [2021-12-16 01:01:40,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-16 01:01:40,778 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) Word has length 111 [2021-12-16 01:01:40,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:40,784 INFO L225 Difference]: With dead ends: 1794 [2021-12-16 01:01:40,784 INFO L226 Difference]: Without dead ends: 1101 [2021-12-16 01:01:40,787 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 303 GetRequests, 253 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 667 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2021-12-16 01:01:40,803 INFO L933 BasicCegarLoop]: 252 mSDtfsCounter, 535 mSDsluCounter, 1537 mSDsCounter, 0 mSdLazyCounter, 1483 mSolverCounterSat, 257 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 536 SdHoareTripleChecker+Valid, 1789 SdHoareTripleChecker+Invalid, 1740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 257 IncrementalHoareTripleChecker+Valid, 1483 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:40,804 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [536 Valid, 1789 Invalid, 1740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [257 Valid, 1483 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-16 01:01:40,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-12-16 01:01:40,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 887. [2021-12-16 01:01:40,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 887 states, 659 states have (on average 1.1881638846737481) internal successors, (783), 710 states have internal predecessors, (783), 121 states have call successors, (121), 100 states have call predecessors, (121), 106 states have return successors, (154), 111 states have call predecessors, (154), 121 states have call successors, (154) [2021-12-16 01:01:40,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 887 states and 1058 transitions. [2021-12-16 01:01:40,895 INFO L78 Accepts]: Start accepts. Automaton has 887 states and 1058 transitions. Word has length 111 [2021-12-16 01:01:40,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:40,896 INFO L470 AbstractCegarLoop]: Abstraction has 887 states and 1058 transitions. [2021-12-16 01:01:40,896 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-12-16 01:01:40,896 INFO L276 IsEmpty]: Start isEmpty. Operand 887 states and 1058 transitions. [2021-12-16 01:01:40,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2021-12-16 01:01:40,899 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:40,899 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:40,923 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:41,119 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 01:01:41,120 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:41,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:41,120 INFO L85 PathProgramCache]: Analyzing trace with hash 770649589, now seen corresponding path program 1 times [2021-12-16 01:01:41,120 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:41,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [894354485] [2021-12-16 01:01:41,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:41,121 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:41,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:41,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:41,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:41,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:41,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:41,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-16 01:01:41,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:41,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:41,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:41,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:41,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-16 01:01:41,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:41,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:41,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-16 01:01:41,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-16 01:01:41,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-16 01:01:41,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:41,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-12-16 01:01:41,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:41,264 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 82 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-16 01:01:41,264 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:41,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [894354485] [2021-12-16 01:01:41,264 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [894354485] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:41,264 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:41,265 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:41,265 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009937803] [2021-12-16 01:01:41,265 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:41,265 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:41,265 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:41,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:41,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:41,266 INFO L87 Difference]: Start difference. First operand 887 states and 1058 transitions. Second operand has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-16 01:01:41,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:41,877 INFO L93 Difference]: Finished difference Result 2536 states and 3071 transitions. [2021-12-16 01:01:41,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-16 01:01:41,877 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 195 [2021-12-16 01:01:41,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:41,896 INFO L225 Difference]: With dead ends: 2536 [2021-12-16 01:01:41,897 INFO L226 Difference]: Without dead ends: 1657 [2021-12-16 01:01:41,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2021-12-16 01:01:41,900 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 483 mSDsluCounter, 602 mSDsCounter, 0 mSdLazyCounter, 800 mSolverCounterSat, 183 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 831 SdHoareTripleChecker+Invalid, 983 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 183 IncrementalHoareTripleChecker+Valid, 800 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:41,900 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [489 Valid, 831 Invalid, 983 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [183 Valid, 800 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-16 01:01:41,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2021-12-16 01:01:42,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1648. [2021-12-16 01:01:42,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1648 states, 1231 states have (on average 1.1551584077985377) internal successors, (1422), 1318 states have internal predecessors, (1422), 221 states have call successors, (221), 188 states have call predecessors, (221), 195 states have return successors, (277), 205 states have call predecessors, (277), 221 states have call successors, (277) [2021-12-16 01:01:42,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1648 states to 1648 states and 1920 transitions. [2021-12-16 01:01:42,046 INFO L78 Accepts]: Start accepts. Automaton has 1648 states and 1920 transitions. Word has length 195 [2021-12-16 01:01:42,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:42,047 INFO L470 AbstractCegarLoop]: Abstraction has 1648 states and 1920 transitions. [2021-12-16 01:01:42,047 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-16 01:01:42,047 INFO L276 IsEmpty]: Start isEmpty. Operand 1648 states and 1920 transitions. [2021-12-16 01:01:42,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2021-12-16 01:01:42,050 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:42,051 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:42,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-16 01:01:42,051 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:42,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:42,052 INFO L85 PathProgramCache]: Analyzing trace with hash 35414297, now seen corresponding path program 1 times [2021-12-16 01:01:42,052 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:42,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1350003268] [2021-12-16 01:01:42,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:42,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:42,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:42,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:42,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:42,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:42,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:42,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-16 01:01:42,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:42,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:42,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:42,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:42,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-16 01:01:42,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-16 01:01:42,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:42,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:42,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 150 [2021-12-16 01:01:42,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-16 01:01:42,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-16 01:01:42,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:42,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-16 01:01:42,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,248 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 93 proven. 28 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-12-16 01:01:42,248 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:42,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1350003268] [2021-12-16 01:01:42,248 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1350003268] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:42,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1528922372] [2021-12-16 01:01:42,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:42,248 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:42,249 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:42,264 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:42,265 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 01:01:42,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,373 INFO L263 TraceCheckSpWp]: Trace formula consists of 740 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-16 01:01:42,384 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:42,695 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 151 proven. 4 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2021-12-16 01:01:42,696 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:43,185 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2021-12-16 01:01:43,185 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1528922372] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:43,185 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:43,185 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2021-12-16 01:01:43,185 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811950485] [2021-12-16 01:01:43,185 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:43,186 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-16 01:01:43,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:43,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-16 01:01:43,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=527, Unknown=0, NotChecked=0, Total=650 [2021-12-16 01:01:43,187 INFO L87 Difference]: Start difference. First operand 1648 states and 1920 transitions. Second operand has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-12-16 01:01:44,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:44,742 INFO L93 Difference]: Finished difference Result 3617 states and 4344 transitions. [2021-12-16 01:01:44,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-16 01:01:44,743 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) Word has length 199 [2021-12-16 01:01:44,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:44,744 INFO L225 Difference]: With dead ends: 3617 [2021-12-16 01:01:44,744 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:01:44,752 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 489 GetRequests, 431 SyntacticMatches, 5 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 602 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=613, Invalid=2357, Unknown=0, NotChecked=0, Total=2970 [2021-12-16 01:01:44,753 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 1037 mSDsluCounter, 515 mSDsCounter, 0 mSdLazyCounter, 1955 mSolverCounterSat, 481 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1043 SdHoareTripleChecker+Valid, 670 SdHoareTripleChecker+Invalid, 2436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 481 IncrementalHoareTripleChecker+Valid, 1955 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:44,753 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1043 Valid, 670 Invalid, 2436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [481 Valid, 1955 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-16 01:01:44,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:01:44,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:01:44,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:01:44,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:01:44,754 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 199 [2021-12-16 01:01:44,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:44,754 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:01:44,755 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-12-16 01:01:44,755 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:01:44,755 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:01:44,757 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:01:44,795 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:44,971 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-16 01:01:44,974 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:01:56,657 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 293 300) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse3) (or .cse0 (not (< 1 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2021-12-16 01:01:56,657 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2021-12-16 01:01:56,657 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 293 300) no Hoare annotation was computed. [2021-12-16 01:01:56,658 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2021-12-16 01:01:56,658 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2021-12-16 01:01:56,658 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (< 1 ~waterLevel~0)) .cse1 .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or .cse0 (not (= |old(~methaneLevelCritical~0)| 0)) (not (<= 1 ~switchedOnBeforeTS~0)) .cse2 (= ~methaneLevelCritical~0 0) .cse3))) [2021-12-16 01:01:56,658 INFO L858 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2021-12-16 01:01:56,658 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2021-12-16 01:01:56,658 INFO L861 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2021-12-16 01:01:56,658 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2021-12-16 01:01:56,659 INFO L861 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2021-12-16 01:01:56,659 INFO L858 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2021-12-16 01:01:56,659 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 952 981) the Hoare annotation is: true [2021-12-16 01:01:56,659 INFO L861 garLoopResultBuilder]: At program point L977(lines 952 981) the Hoare annotation is: true [2021-12-16 01:01:56,659 INFO L858 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2021-12-16 01:01:56,660 INFO L858 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2021-12-16 01:01:56,661 INFO L861 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2021-12-16 01:01:56,661 INFO L858 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2021-12-16 01:01:56,661 INFO L858 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2021-12-16 01:01:56,662 INFO L854 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse8 (= 0 ~methaneLevelCritical~0)) (.cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (not .cse0))) (let ((.cse3 (and .cse13 .cse10 .cse14 .cse16 .cse11 .cse15)) (.cse4 (not .cse16)) (.cse9 (and .cse10 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse11)) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse13 .cse10 .cse14 .cse11 (<= 1 ~pumpRunning~0) (not .cse8) .cse15)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse7 .cse8 .cse9 .cse5) (or .cse0 .cse2 .cse3 .cse4 .cse7 .cse5 .cse9) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (and .cse10 (= ~waterLevel~0 1) .cse11) (not (< 1 |old(~waterLevel~0)|)) .cse5) (or .cse0 .cse1 .cse6 .cse2 .cse8 .cse5) (or .cse12 (not (= |old(~waterLevel~0)| 2))) (or .cse12 .cse7))))) [2021-12-16 01:01:56,662 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2021-12-16 01:01:56,662 INFO L854 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse4) (or .cse3 .cse5 (not (< 1 |old(~waterLevel~0)|)) .cse4) (or .cse5 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))))) [2021-12-16 01:01:56,663 INFO L854 garLoopResultBuilder]: At program point L279-1(lines 260 284) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse20 (= 0 ~methaneLevelCritical~0)) (.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse22 (= ~pumpRunning~0 0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 1)) (.cse27 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (not .cse6)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (not (= ~systemActive~0 0))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse7 (and .cse24 .cse11 .cse25 .cse27 .cse12 .cse13 .cse14 .cse26 .cse15)) (.cse8 (and .cse24 .cse11 .cse25 .cse27 .cse13 .cse14 .cse26 .cse15 .cse22)) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse16 (not .cse27)) (.cse5 (and .cse4 .cse22)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse18 (and .cse24 .cse11 .cse25 .cse13 (not .cse20) .cse14 .cse26 .cse15 .cse22)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (and .cse11 .cse4 .cse13 .cse14 .cse15 .cse22)) (.cse17 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (and .cse4 (<= 1 ~pumpRunning~0)) .cse5 .cse0) (or .cse6 .cse7 .cse3 .cse8 .cse9 .cse10 (and .cse11 .cse4 .cse12 .cse13 .cse14 .cse15) .cse16 .cse17) (or .cse6 .cse18 .cse19 .cse9 .cse20 .cse17) (let ((.cse21 (= ~waterLevel~0 1))) (or .cse6 .cse3 (and .cse11 .cse21 .cse12 .cse13 .cse14 .cse15) (not (< 1 |old(~waterLevel~0)|)) (and .cse11 .cse21 .cse13 .cse14 .cse15 .cse22) .cse17)) (or .cse6 .cse18 .cse20 .cse23 .cse17) (or .cse0 .cse2 .cse23) (or .cse6 .cse7 .cse8 .cse19 .cse9 .cse16 .cse17) (or .cse5 .cse0 .cse1) (or .cse6 .cse3 .cse18 .cse9 .cse10 .cse20 .cse17))))) [2021-12-16 01:01:56,663 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2021-12-16 01:01:56,664 INFO L854 garLoopResultBuilder]: At program point L308(lines 301 311) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= ~waterLevel~0 1)) (.cse9 (= 0 ~methaneLevelCritical~0)) (.cse19 (not .cse0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (and .cse12 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse14 .cse15)) (.cse8 (and .cse17 .cse12 .cse18 .cse13 (<= 1 ~pumpRunning~0) (not .cse9) .cse14 .cse19 .cse15)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (and .cse17 .cse12 .cse18 .cse16 .cse13 .cse14 .cse19 .cse15)) (.cse5 (not .cse16)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse3 .cse8 .cse9 .cse6) (or .cse10 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse2 .cse3 .cse8 .cse11 .cse9 .cse6) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse12 (= ~waterLevel~0 1) .cse13 .cse14 .cse15) .cse6) (or .cse0 .cse7 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse11))))) [2021-12-16 01:01:56,664 INFO L858 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2021-12-16 01:01:56,666 INFO L858 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2021-12-16 01:01:56,679 INFO L854 garLoopResultBuilder]: At program point L552(lines 545 554) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (and (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse1 (and .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-16 01:01:56,679 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 173 199) no Hoare annotation was computed. [2021-12-16 01:01:56,679 INFO L854 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse22 (= ~waterLevel~0 1)) (.cse11 (= 0 ~methaneLevelCritical~0)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse24 (= ~pumpRunning~0 0)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse27 (<= ~waterLevel~0 1)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse17 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse20 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse25 (not .cse3))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse26 .cse13 .cse27 .cse28 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse25)) (.cse7 (and .cse26 .cse13 .cse27 .cse28 .cse16 .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse8 (not .cse28)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse13 .cse14 .cse16 .cse18 .cse17 .cse19 .cse20 .cse24)) (.cse10 (and .cse26 .cse13 .cse27 .cse16 (not .cse11) .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse23 (and .cse13 .cse22 .cse16 .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse21 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse3 .cse5 .cse6 .cse10 .cse11 .cse9) (or .cse3 .cse4 .cse6 .cse12 (and .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20) .cse7 .cse8 .cse21 .cse9) (or .cse3 .cse0 (and .cse13 .cse22 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20) .cse2 .cse23 .cse9) (or .cse3 .cse6 .cse12 .cse10 .cse21 .cse11 .cse9) (or .cse3 .cse0 .cse2 .cse23 .cse9 .cse11) (or (and .cse14 .cse17 .cse19 .cse24) .cse1 .cse21))))) [2021-12-16 01:01:56,679 INFO L858 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2021-12-16 01:01:56,684 INFO L854 garLoopResultBuilder]: At program point L532(lines 527 534) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (< 1 |old(~waterLevel~0)|)) .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse3 .cse1))) [2021-12-16 01:01:56,684 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2021-12-16 01:01:56,684 INFO L858 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2021-12-16 01:01:56,684 INFO L854 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (and .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse1 (and .cse4 .cse5 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse3)))) [2021-12-16 01:01:56,684 INFO L858 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2021-12-16 01:01:56,685 INFO L854 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse22 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 1)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse26 (not .cse0)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse13 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse24 .cse7 .cse25 .cse9 (not .cse4) .cse10 .cse11 .cse26 .cse12 .cse13)) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse17 (and .cse24 .cse7 .cse25 .cse14 .cse15 .cse9 .cse10 .cse11 .cse12)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse18 (and .cse24 .cse7 .cse25 .cse14 .cse9 .cse10 .cse11 .cse26 .cse12 .cse13)) (.cse19 (not .cse14)) (.cse16 (and .cse7 .cse22 .cse9 .cse10 .cse11 .cse12 .cse13)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse23 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse20 (not (= |old(~pumpRunning~0)| 0))) (.cse21 (and .cse22 .cse11 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse0 .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (not (< 1 |old(~waterLevel~0)|)) .cse5 (and .cse7 .cse8 .cse14 .cse15 .cse9 .cse11 .cse10 .cse12))) (or .cse0 .cse1 .cse6 .cse3 .cse16 .cse4 .cse5) (or .cse0 .cse17 .cse2 .cse3 .cse18 .cse19 .cse5) (or .cse20 .cse21 (and .cse22 (<= 1 ~pumpRunning~0) .cse11) (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse17 .cse3 .cse18 (and .cse7 .cse22 .cse15 .cse9 .cse10 .cse11 .cse12) .cse19 .cse16 .cse23 .cse5) (or .cse20 .cse23 .cse21) (or .cse6 .cse20 (not (= ~systemActive~0 0)) .cse21))))) [2021-12-16 01:01:56,685 INFO L858 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2021-12-16 01:01:56,685 INFO L858 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2021-12-16 01:01:56,685 INFO L858 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2021-12-16 01:01:56,685 INFO L854 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= 0 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse1 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6 .cse7 (not .cse0) .cse8)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse10) (or .cse11 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (and .cse3 (= ~waterLevel~0 1) .cse4 .cse5 .cse6 .cse7 .cse8) (not (< 1 |old(~waterLevel~0)|)) .cse10) (or .cse11 .cse9)))) [2021-12-16 01:01:56,685 INFO L854 garLoopResultBuilder]: At program point L563-1(lines 555 583) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse7 (= ~waterLevel~0 1)) (.cse23 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse25 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse27 (<= ~waterLevel~0 1)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse17 (= 0 ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse1 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse2 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse24 (not .cse5)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse19 (= ~pumpRunning~0 0))) (let ((.cse16 (and .cse26 .cse6 .cse27 .cse8 (not .cse17) .cse9 .cse1 .cse2 .cse24 .cse10 .cse19)) (.cse18 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse20 (and .cse26 .cse6 .cse27 .cse25 .cse8 .cse4 .cse1 .cse9 .cse2 .cse10)) (.cse15 (and .cse6 .cse23 .cse8 .cse9 .cse1 .cse2 .cse24 .cse10 .cse19)) (.cse21 (and .cse26 .cse6 .cse27 .cse25 .cse8 .cse9 .cse1 .cse2 .cse24 .cse10 .cse19)) (.cse22 (not .cse25)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (and .cse6 .cse7 .cse8 .cse9 .cse1 .cse2 .cse24 .cse10 .cse19)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 (and .cse4 .cse1 .cse2)) (or .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse4 .cse1 .cse9 .cse2 .cse10) .cse11 .cse12 .cse13) (or .cse5 .cse0 .cse14 .cse15 .cse16 .cse17 .cse13) (or .cse5 .cse18 .cse14 .cse16 .cse17 .cse13) (or .cse0 .cse3 (not (= ~systemActive~0 0)) .cse19) (or .cse5 .cse18 .cse14 .cse20 .cse21 .cse22 .cse13) (or .cse5 .cse0 .cse14 (and .cse6 .cse23 .cse4 .cse8 .cse1 .cse9 .cse2 .cse10) .cse20 .cse15 .cse21 .cse22 .cse13) (or .cse0 (and .cse23 .cse4) .cse3 (and (= ~waterLevel~0 2) .cse23)) (or .cse5 .cse0 .cse11 .cse12 .cse13 .cse17))))) [2021-12-16 01:01:56,686 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 173 199) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (and .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse1 (and .cse4 .cse5 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse3)))) [2021-12-16 01:01:56,686 INFO L854 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse9 (not (= 0 ~methaneLevelCritical~0))) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2 (<= ~waterLevel~0 1) .cse3 (<= 1 ~pumpRunning~0) .cse4 .cse9 .cse5 (not .cse0) .cse6)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse0 (and .cse2 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse3 .cse4 .cse9 .cse5 .cse6) .cse10 .cse11 .cse12 .cse8) (or .cse13 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse10 .cse12 .cse8) (or .cse13 .cse11) (or .cse0 .cse1 .cse7 (not (= ~methaneLevelCritical~0 0)) .cse8)))) [2021-12-16 01:01:56,686 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2021-12-16 01:01:56,686 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2021-12-16 01:01:56,686 INFO L854 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse15 (= ~methaneLevelCritical~0 0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse18 (not .cse0)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse7 (and .cse16 .cse12 .cse17 .cse13 (<= 1 ~pumpRunning~0) (not .cse8) .cse18 .cse14)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (and .cse12 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse14)) (.cse3 (and .cse16 .cse12 .cse17 .cse15 .cse13 .cse18 .cse14)) (.cse4 (not .cse15)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse7 .cse1 .cse2 .cse8 .cse5) (or .cse0 .cse7 .cse2 .cse9 .cse10 .cse8 .cse5) (or .cse0 .cse11 .cse2 .cse9 .cse3 .cse4 .cse5) (or .cse6 .cse10) (or .cse0 .cse11 (and .cse12 (= ~waterLevel~0 1) .cse13 .cse14) (not (< 1 |old(~waterLevel~0)|)) .cse5))))) [2021-12-16 01:01:56,686 INFO L854 garLoopResultBuilder]: At program point L415(lines 410 417) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse3 .cse4 (<= ~waterLevel~0 2) .cse5) (and .cse0 .cse2 .cse1 .cse3 .cse5 .cse6) (and .cse0 .cse1 (= ~waterLevel~0 2) .cse3 .cse5 .cse6))) [2021-12-16 01:01:56,687 INFO L854 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse6 .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse7))) [2021-12-16 01:01:56,687 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2021-12-16 01:01:56,687 INFO L858 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2021-12-16 01:01:56,687 INFO L854 garLoopResultBuilder]: At program point L407(lines 395 409) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~systemActive~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (<= ~waterLevel~0 2) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,687 INFO L861 garLoopResultBuilder]: At program point L1043(lines 1024 1046) the Hoare annotation is: true [2021-12-16 01:01:56,687 INFO L854 garLoopResultBuilder]: At program point L1010(lines 1006 1012) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,687 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-12-16 01:01:56,687 INFO L858 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L854 garLoopResultBuilder]: At program point L507(lines 503 509) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,688 INFO L861 garLoopResultBuilder]: At program point L483(lines 420 487) the Hoare annotation is: true [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2021-12-16 01:01:56,688 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:01:56,690 INFO L854 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse6 .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse7))) [2021-12-16 01:01:56,690 INFO L854 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 (<= ~waterLevel~0 2) .cse4))) [2021-12-16 01:01:56,691 INFO L854 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2021-12-16 01:01:56,691 INFO L854 garLoopResultBuilder]: At program point L542(lines 537 544) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,691 INFO L861 garLoopResultBuilder]: At program point L1021(lines 1013 1023) the Hoare annotation is: true [2021-12-16 01:01:56,692 INFO L858 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2021-12-16 01:01:56,692 INFO L854 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 (= ~pumpRunning~0 0)) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse5 .cse4))) [2021-12-16 01:01:56,692 INFO L858 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2021-12-16 01:01:56,692 INFO L858 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2021-12-16 01:01:56,692 INFO L854 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,692 INFO L858 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2021-12-16 01:01:56,692 INFO L858 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2021-12-16 01:01:56,692 INFO L854 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 (= ~methaneLevelCritical~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 (= ~waterLevel~0 2) .cse2 .cse6) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse6))) [2021-12-16 01:01:56,693 INFO L854 garLoopResultBuilder]: At program point L514(lines 510 516) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 01:01:56,693 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 208 232) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:56,693 INFO L854 garLoopResultBuilder]: At program point L372(lines 357 375) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 1))) (or .cse0 (not (= ~waterLevel~0 2)) .cse3 .cse2))) [2021-12-16 01:01:56,693 INFO L858 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2021-12-16 01:01:56,693 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2021-12-16 01:01:56,693 INFO L858 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2021-12-16 01:01:56,694 INFO L854 garLoopResultBuilder]: At program point L290(lines 285 292) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (= ~waterLevel~0 2)) (<= 1 ~pumpRunning~0) .cse2))) [2021-12-16 01:01:56,694 INFO L854 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not .cse0) (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 (not (= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 1)) (not (= ~waterLevel~0 1)) .cse3)))) [2021-12-16 01:01:56,694 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2021-12-16 01:01:56,694 INFO L858 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2021-12-16 01:01:56,695 INFO L858 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2021-12-16 01:01:56,695 INFO L854 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~waterLevel~0 2)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse1) .cse2 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 (not .cse2) .cse3 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))))) [2021-12-16 01:01:56,695 INFO L854 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:56,695 INFO L858 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2021-12-16 01:01:56,695 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2021-12-16 01:01:56,695 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2021-12-16 01:01:56,695 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse4) (or .cse5 .cse2 .cse3) (or .cse5 .cse2 .cse4))) [2021-12-16 01:01:56,696 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 234 258) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:56,696 INFO L854 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:56,696 INFO L854 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2021-12-16 01:01:56,697 INFO L854 garLoopResultBuilder]: At program point L391(lines 376 394) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2021-12-16 01:01:56,697 INFO L854 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:56,697 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:56,697 INFO L858 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2021-12-16 01:01:56,698 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2021-12-16 01:01:56,698 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 312 320) the Hoare annotation is: true [2021-12-16 01:01:56,698 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 312 320) no Hoare annotation was computed. [2021-12-16 01:01:56,708 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:56,709 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:01:56,804 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:01:56 BoogieIcfgContainer [2021-12-16 01:01:56,804 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:01:56,805 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:01:56,805 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:01:56,805 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:01:56,805 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:35" (3/4) ... [2021-12-16 01:01:56,807 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:01:56,811 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:56,812 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-16 01:01:56,839 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-16 01:01:56,839 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:01:56,840 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:01:56,840 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:01:56,840 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:01:56,840 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:56,841 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:56,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 01:01:56,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 01:01:56,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 01:01:56,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || (((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && pumpRunning == 0) [2021-12-16 01:01:56,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:56,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-16 01:01:56,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive))) || (((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) [2021-12-16 01:01:56,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) <= 2) || ((1 <= pumpRunning && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning) && \result == waterLevel) && tmp == waterLevel)) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || pumpRunning == 0)) && ((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && waterLevel == \old(waterLevel)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) [2021-12-16 01:01:56,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 0)) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:56,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-16 01:01:56,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && systemActive == 0) && 1 == \result) && waterLevel <= 2) && pumpRunning == 0 [2021-12-16 01:01:56,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result))) && ((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) [2021-12-16 01:01:56,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:56,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-16 01:01:56,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:56,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || (\result == 1 && pumpRunning == 0)) || waterLevel == 2) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 0)) [2021-12-16 01:01:56,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:56,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) || ((((\result == 1 && tmp___0 == 0) && \result == 0) && pumpRunning == \old(pumpRunning)) && tmp == 1))) && (((0 == systemActive || !(waterLevel == 2)) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:56,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) && ((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:56,917 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:01:56,917 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:01:56,918 INFO L158 Benchmark]: Toolchain (without parser) took 22433.86ms. Allocated memory was 102.8MB in the beginning and 327.2MB in the end (delta: 224.4MB). Free memory was 72.9MB in the beginning and 229.3MB in the end (delta: -156.5MB). Peak memory consumption was 68.6MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,918 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 102.8MB. Free memory was 59.3MB in the beginning and 59.3MB in the end (delta: 41.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:56,918 INFO L158 Benchmark]: CACSL2BoogieTranslator took 543.24ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 72.9MB in the beginning and 90.5MB in the end (delta: -17.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,919 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.81ms. Allocated memory is still 123.7MB. Free memory was 90.5MB in the beginning and 87.9MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,919 INFO L158 Benchmark]: Boogie Preprocessor took 27.94ms. Allocated memory is still 123.7MB. Free memory was 87.9MB in the beginning and 86.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:56,919 INFO L158 Benchmark]: RCFGBuilder took 482.66ms. Allocated memory is still 123.7MB. Free memory was 86.4MB in the beginning and 69.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,919 INFO L158 Benchmark]: TraceAbstraction took 21201.14ms. Allocated memory was 123.7MB in the beginning and 327.2MB in the end (delta: 203.4MB). Free memory was 68.5MB in the beginning and 237.7MB in the end (delta: -169.2MB). Peak memory consumption was 170.5MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,920 INFO L158 Benchmark]: Witness Printer took 112.74ms. Allocated memory is still 327.2MB. Free memory was 237.7MB in the beginning and 229.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:01:56,921 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 102.8MB. Free memory was 59.3MB in the beginning and 59.3MB in the end (delta: 41.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 543.24ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 72.9MB in the beginning and 90.5MB in the end (delta: -17.7MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.81ms. Allocated memory is still 123.7MB. Free memory was 90.5MB in the beginning and 87.9MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.94ms. Allocated memory is still 123.7MB. Free memory was 87.9MB in the beginning and 86.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 482.66ms. Allocated memory is still 123.7MB. Free memory was 86.4MB in the beginning and 69.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 21201.14ms. Allocated memory was 123.7MB in the beginning and 327.2MB in the end (delta: 203.4MB). Free memory was 68.5MB in the beginning and 237.7MB in the end (delta: -169.2MB). Peak memory consumption was 170.5MB. Max. memory is 16.1GB. * Witness Printer took 112.74ms. Allocated memory is still 327.2MB. Free memory was 237.7MB in the beginning and 229.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 21.1s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3659 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3609 mSDsluCounter, 7298 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5445 mSDsCounter, 1428 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5951 IncrementalHoareTripleChecker+Invalid, 7379 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1428 mSolverCounterUnsat, 1853 mSDtfsCounter, 5951 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1055 GetRequests, 831 SyntacticMatches, 7 SemanticMatches, 217 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1867 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1648occurred in iteration=11, InterpolantAutomatonStates: 190, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 406 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 3971 PreInvPairs, 4629 NumberOfFragments, 4818 HoareAnnotationTreeSize, 3971 FomulaSimplifications, 8306 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 52 FomulaSimplificationsInter, 63738 FormulaSimplificationTreeSizeReductionInter, 10.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1305 NumberOfCodeBlocks, 1305 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1599 ConstructedInterpolants, 0 QuantifiedInterpolants, 3117 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1252 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 897/1003 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result))) && ((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) <= 2) || ((1 <= pumpRunning && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || ((pumpRunning == \old(pumpRunning) && \result == waterLevel) && tmp == waterLevel)) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || pumpRunning == 0)) && ((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && waterLevel == \old(waterLevel)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive))) || (((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: (((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 395]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && systemActive == 0) && 1 == \result) && waterLevel <= 2) && pumpRunning == 0 - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1006]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 1013]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 0)) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || (((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && pumpRunning == 0) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || (\result == 1 && pumpRunning == 0)) || waterLevel == 2) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 0)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) || ((((\result == 1 && tmp___0 == 0) && \result == 0) && pumpRunning == \old(pumpRunning)) && tmp == 1))) && (((0 == systemActive || !(waterLevel == 2)) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) && ((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-16 01:01:57,008 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE