./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:55,562 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:55,564 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:55,625 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:55,626 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:55,629 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:55,630 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:55,633 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:55,634 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:55,635 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:55,638 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:55,638 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:55,640 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:55,642 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:55,643 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:55,644 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:55,647 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:55,647 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:55,648 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:55,649 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:55,650 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:55,653 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:55,653 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:55,654 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:55,657 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:55,659 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:55,659 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:55,660 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:55,660 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:55,661 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:55,661 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:55,662 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:55,663 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:55,663 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:55,664 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:55,664 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:55,665 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:55,665 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:55,665 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:55,666 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:55,666 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:55,668 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:55,692 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:55,692 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:55,692 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:55,693 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:55,693 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:55,693 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:55,694 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:55,694 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:55,694 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:55,694 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:55,695 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:55,695 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:55,695 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:55,695 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:55,696 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:55,697 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:55,697 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:55,697 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:55,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:55,697 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:55,697 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:55,697 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:55,698 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:55,699 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2021-12-17 15:09:55,911 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:55,927 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:55,931 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:55,931 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:55,932 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:55,933 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2021-12-17 15:09:55,973 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/412853fa5/bebfcdb23eff4bcb9c954f70ee9859a2/FLAGc34b848d3 [2021-12-17 15:09:56,338 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:56,338 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2021-12-17 15:09:56,346 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/412853fa5/bebfcdb23eff4bcb9c954f70ee9859a2/FLAGc34b848d3 [2021-12-17 15:09:56,744 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/412853fa5/bebfcdb23eff4bcb9c954f70ee9859a2 [2021-12-17 15:09:56,746 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:56,749 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:56,750 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:56,750 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:56,753 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:56,753 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:56" (1/1) ... [2021-12-17 15:09:56,755 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3bf85dbd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:56, skipping insertion in model container [2021-12-17 15:09:56,755 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:56" (1/1) ... [2021-12-17 15:09:56,760 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:56,792 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:56,984 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2021-12-17 15:09:57,049 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:57,054 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:57,104 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2021-12-17 15:09:57,123 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:57,136 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:57,144 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57 WrapperNode [2021-12-17 15:09:57,144 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:57,145 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:57,145 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:57,145 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:57,151 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,170 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,213 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 294 [2021-12-17 15:09:57,214 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:57,215 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:57,215 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:57,215 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:57,224 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,225 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,236 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,239 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,244 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,258 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,261 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,265 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:57,266 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:57,267 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:57,267 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:57,268 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (1/1) ... [2021-12-17 15:09:57,273 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:57,281 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:57,305 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:57,320 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:57,375 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:57,375 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:57,375 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:57,375 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:57,375 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:57,375 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:57,375 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:57,376 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:57,376 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:57,376 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:57,376 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:57,376 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:57,376 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:57,377 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:57,377 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:57,377 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:57,475 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:57,476 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:57,818 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:57,823 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:57,823 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:57,824 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:57 BoogieIcfgContainer [2021-12-17 15:09:57,825 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:57,826 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:57,826 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:57,828 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:57,828 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:56" (1/3) ... [2021-12-17 15:09:57,829 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50719b2e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:57, skipping insertion in model container [2021-12-17 15:09:57,829 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:57" (2/3) ... [2021-12-17 15:09:57,829 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50719b2e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:57, skipping insertion in model container [2021-12-17 15:09:57,829 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:57" (3/3) ... [2021-12-17 15:09:57,830 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2021-12-17 15:09:57,833 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:57,833 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:57,864 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:57,869 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:57,869 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:57,895 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-17 15:09:57,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:57,901 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:57,902 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:57,902 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:57,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:57,906 INFO L85 PathProgramCache]: Analyzing trace with hash 2077500872, now seen corresponding path program 1 times [2021-12-17 15:09:57,912 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:57,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1449044414] [2021-12-17 15:09:57,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:57,914 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:57,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:58,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:58,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,079 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:58,080 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1449044414] [2021-12-17 15:09:58,080 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1449044414] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:58,081 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:58,081 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:58,082 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1810071727] [2021-12-17 15:09:58,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,086 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:58,087 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:58,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:58,109 INFO L87 Difference]: Start difference. First operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,135 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2021-12-17 15:09:58,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:58,136 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:58,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,142 INFO L225 Difference]: With dead ends: 211 [2021-12-17 15:09:58,143 INFO L226 Difference]: Without dead ends: 101 [2021-12-17 15:09:58,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:58,197 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,212 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:58,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2021-12-17 15:09:58,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2021-12-17 15:09:58,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:58,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2021-12-17 15:09:58,269 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 32 [2021-12-17 15:09:58,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,269 INFO L470 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2021-12-17 15:09:58,270 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,270 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2021-12-17 15:09:58,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:58,278 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,278 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,279 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:58,279 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,280 INFO L85 PathProgramCache]: Analyzing trace with hash 604529845, now seen corresponding path program 1 times [2021-12-17 15:09:58,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375076762] [2021-12-17 15:09:58,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,281 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:58,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:58,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,388 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:58,388 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375076762] [2021-12-17 15:09:58,388 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1375076762] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:58,389 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:58,389 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:58,389 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403259135] [2021-12-17 15:09:58,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,390 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:58,390 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:58,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:58,391 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,404 INFO L93 Difference]: Finished difference Result 162 states and 210 transitions. [2021-12-17 15:09:58,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:58,404 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:58,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,405 INFO L225 Difference]: With dead ends: 162 [2021-12-17 15:09:58,405 INFO L226 Difference]: Without dead ends: 92 [2021-12-17 15:09:58,406 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:58,407 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:58,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2021-12-17 15:09:58,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2021-12-17 15:09:58,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-17 15:09:58,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2021-12-17 15:09:58,415 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 33 [2021-12-17 15:09:58,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,415 INFO L470 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2021-12-17 15:09:58,415 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,415 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2021-12-17 15:09:58,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:58,416 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,417 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,417 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:58,417 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,417 INFO L85 PathProgramCache]: Analyzing trace with hash -1594505260, now seen corresponding path program 1 times [2021-12-17 15:09:58,417 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,418 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [257062234] [2021-12-17 15:09:58,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,419 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:58,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:58,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,486 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:58,487 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [257062234] [2021-12-17 15:09:58,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [257062234] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:58,487 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:58,487 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:58,487 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755566643] [2021-12-17 15:09:58,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,487 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:58,488 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:58,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:58,488 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:58,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,549 INFO L93 Difference]: Finished difference Result 223 states and 292 transitions. [2021-12-17 15:09:58,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:09:58,551 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:09:58,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,552 INFO L225 Difference]: With dead ends: 223 [2021-12-17 15:09:58,553 INFO L226 Difference]: Without dead ends: 139 [2021-12-17 15:09:58,553 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:09:58,554 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 180 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,555 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [180 Valid, 401 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:58,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2021-12-17 15:09:58,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 136. [2021-12-17 15:09:58,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 102 states have (on average 1.3333333333333333) internal successors, (136), 115 states have internal predecessors, (136), 20 states have call successors, (20), 13 states have call predecessors, (20), 13 states have return successors, (21), 14 states have call predecessors, (21), 20 states have call successors, (21) [2021-12-17 15:09:58,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 177 transitions. [2021-12-17 15:09:58,567 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 177 transitions. Word has length 38 [2021-12-17 15:09:58,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,567 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 177 transitions. [2021-12-17 15:09:58,568 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:58,568 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 177 transitions. [2021-12-17 15:09:58,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-17 15:09:58,569 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,569 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,569 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:58,569 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,569 INFO L85 PathProgramCache]: Analyzing trace with hash -969732780, now seen corresponding path program 1 times [2021-12-17 15:09:58,569 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422299277] [2021-12-17 15:09:58,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,570 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:09:58,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-17 15:09:58,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,644 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:58,644 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422299277] [2021-12-17 15:09:58,644 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422299277] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:58,644 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:58,644 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:58,645 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645167062] [2021-12-17 15:09:58,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,646 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:58,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:58,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:58,646 INFO L87 Difference]: Start difference. First operand 136 states and 177 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,786 INFO L93 Difference]: Finished difference Result 316 states and 425 transitions. [2021-12-17 15:09:58,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:09:58,787 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-17 15:09:58,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,793 INFO L225 Difference]: With dead ends: 316 [2021-12-17 15:09:58,793 INFO L226 Difference]: Without dead ends: 188 [2021-12-17 15:09:58,797 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:58,799 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 57 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 563 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,800 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 563 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:58,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2021-12-17 15:09:58,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 178. [2021-12-17 15:09:58,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 134 states have (on average 1.2686567164179106) internal successors, (170), 145 states have internal predecessors, (170), 24 states have call successors, (24), 19 states have call predecessors, (24), 19 states have return successors, (32), 22 states have call predecessors, (32), 24 states have call successors, (32) [2021-12-17 15:09:58,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 226 transitions. [2021-12-17 15:09:58,821 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 226 transitions. Word has length 41 [2021-12-17 15:09:58,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,821 INFO L470 AbstractCegarLoop]: Abstraction has 178 states and 226 transitions. [2021-12-17 15:09:58,822 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:58,822 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 226 transitions. [2021-12-17 15:09:58,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:58,824 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,825 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,825 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:58,825 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,825 INFO L85 PathProgramCache]: Analyzing trace with hash -1724941251, now seen corresponding path program 1 times [2021-12-17 15:09:58,825 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88044183] [2021-12-17 15:09:58,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,826 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:58,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:58,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:58,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:58,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,906 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:58,906 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88044183] [2021-12-17 15:09:58,906 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88044183] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:58,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:58,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:58,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57226580] [2021-12-17 15:09:58,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,907 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:58,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:58,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:58,907 INFO L87 Difference]: Start difference. First operand 178 states and 226 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:59,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:59,109 INFO L93 Difference]: Finished difference Result 548 states and 730 transitions. [2021-12-17 15:09:59,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:09:59,110 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-17 15:09:59,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:59,112 INFO L225 Difference]: With dead ends: 548 [2021-12-17 15:09:59,112 INFO L226 Difference]: Without dead ends: 378 [2021-12-17 15:09:59,113 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-17 15:09:59,113 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 193 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:59,113 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [199 Valid, 489 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:59,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2021-12-17 15:09:59,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 347. [2021-12-17 15:09:59,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 262 states have (on average 1.248091603053435) internal successors, (327), 277 states have internal predecessors, (327), 45 states have call successors, (45), 35 states have call predecessors, (45), 39 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2021-12-17 15:09:59,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 440 transitions. [2021-12-17 15:09:59,135 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 440 transitions. Word has length 57 [2021-12-17 15:09:59,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:59,135 INFO L470 AbstractCegarLoop]: Abstraction has 347 states and 440 transitions. [2021-12-17 15:09:59,135 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:59,136 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 440 transitions. [2021-12-17 15:09:59,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:59,136 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:59,136 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:59,137 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:59,137 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:59,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:59,137 INFO L85 PathProgramCache]: Analyzing trace with hash 80497083, now seen corresponding path program 1 times [2021-12-17 15:09:59,137 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:59,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121488176] [2021-12-17 15:09:59,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:59,137 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:59,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:59,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:59,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:59,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,187 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:59,187 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:59,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121488176] [2021-12-17 15:09:59,187 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121488176] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:59,187 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:59,187 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:59,187 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298219766] [2021-12-17 15:09:59,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:59,188 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:59,188 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:59,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:59,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:59,188 INFO L87 Difference]: Start difference. First operand 347 states and 440 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:59,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:59,323 INFO L93 Difference]: Finished difference Result 700 states and 903 transitions. [2021-12-17 15:09:59,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:59,323 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-17 15:09:59,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:59,325 INFO L225 Difference]: With dead ends: 700 [2021-12-17 15:09:59,325 INFO L226 Difference]: Without dead ends: 361 [2021-12-17 15:09:59,326 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:59,326 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 76 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:59,327 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 460 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:59,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2021-12-17 15:09:59,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 353. [2021-12-17 15:09:59,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 268 states have (on average 1.242537313432836) internal successors, (333), 283 states have internal predecessors, (333), 45 states have call successors, (45), 35 states have call predecessors, (45), 39 states have return successors, (68), 46 states have call predecessors, (68), 45 states have call successors, (68) [2021-12-17 15:09:59,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 446 transitions. [2021-12-17 15:09:59,341 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 446 transitions. Word has length 57 [2021-12-17 15:09:59,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:59,342 INFO L470 AbstractCegarLoop]: Abstraction has 353 states and 446 transitions. [2021-12-17 15:09:59,342 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:59,342 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 446 transitions. [2021-12-17 15:09:59,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-17 15:09:59,343 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:59,343 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:59,343 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:59,343 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:59,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:59,343 INFO L85 PathProgramCache]: Analyzing trace with hash 503198909, now seen corresponding path program 1 times [2021-12-17 15:09:59,343 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:59,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574251773] [2021-12-17 15:09:59,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:59,343 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:59,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:59,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:59,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-17 15:09:59,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,384 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:59,384 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:59,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574251773] [2021-12-17 15:09:59,384 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574251773] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:59,384 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:59,384 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:59,384 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1085469071] [2021-12-17 15:09:59,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:59,384 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:59,385 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:59,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:59,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:59,385 INFO L87 Difference]: Start difference. First operand 353 states and 446 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:59,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:59,472 INFO L93 Difference]: Finished difference Result 653 states and 842 transitions. [2021-12-17 15:09:59,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:59,473 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-17 15:09:59,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:59,474 INFO L225 Difference]: With dead ends: 653 [2021-12-17 15:09:59,474 INFO L226 Difference]: Without dead ends: 308 [2021-12-17 15:09:59,475 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:59,475 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 77 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:59,476 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 345 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:59,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2021-12-17 15:09:59,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 303. [2021-12-17 15:09:59,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 230 states have (on average 1.2260869565217392) internal successors, (282), 243 states have internal predecessors, (282), 39 states have call successors, (39), 30 states have call predecessors, (39), 33 states have return successors, (53), 39 states have call predecessors, (53), 39 states have call successors, (53) [2021-12-17 15:09:59,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 374 transitions. [2021-12-17 15:09:59,500 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 374 transitions. Word has length 57 [2021-12-17 15:09:59,500 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:59,500 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 374 transitions. [2021-12-17 15:09:59,500 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:59,500 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 374 transitions. [2021-12-17 15:09:59,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-17 15:09:59,501 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:59,501 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:59,501 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:59,502 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:59,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:59,502 INFO L85 PathProgramCache]: Analyzing trace with hash 924671973, now seen corresponding path program 1 times [2021-12-17 15:09:59,502 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:59,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778101236] [2021-12-17 15:09:59,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:59,502 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:59,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:59,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:59,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-17 15:09:59,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-17 15:09:59,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,590 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:59,590 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:59,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778101236] [2021-12-17 15:09:59,590 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [778101236] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:59,590 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:59,590 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:09:59,590 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592390305] [2021-12-17 15:09:59,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:59,591 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:09:59,591 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:59,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:09:59,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:59,591 INFO L87 Difference]: Start difference. First operand 303 states and 374 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:10:00,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:00,445 INFO L93 Difference]: Finished difference Result 1082 states and 1431 transitions. [2021-12-17 15:10:00,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-17 15:10:00,445 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-17 15:10:00,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:00,450 INFO L225 Difference]: With dead ends: 1082 [2021-12-17 15:10:00,450 INFO L226 Difference]: Without dead ends: 880 [2021-12-17 15:10:00,452 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-17 15:10:00,467 INFO L933 BasicCegarLoop]: 191 mSDtfsCounter, 610 mSDsluCounter, 808 mSDsCounter, 0 mSdLazyCounter, 997 mSolverCounterSat, 240 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 999 SdHoareTripleChecker+Invalid, 1237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 240 IncrementalHoareTripleChecker+Valid, 997 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:00,468 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [620 Valid, 999 Invalid, 1237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [240 Valid, 997 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-17 15:10:00,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 880 states. [2021-12-17 15:10:00,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 880 to 790. [2021-12-17 15:10:00,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2205387205387206) internal successors, (725), 633 states have internal predecessors, (725), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (164), 105 states have call predecessors, (164), 104 states have call successors, (164) [2021-12-17 15:10:00,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 993 transitions. [2021-12-17 15:10:00,545 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 993 transitions. Word has length 61 [2021-12-17 15:10:00,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:00,546 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 993 transitions. [2021-12-17 15:10:00,547 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:10:00,547 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 993 transitions. [2021-12-17 15:10:00,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-17 15:10:00,549 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:00,549 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:00,550 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:10:00,550 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:00,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:00,551 INFO L85 PathProgramCache]: Analyzing trace with hash -110034283, now seen corresponding path program 1 times [2021-12-17 15:10:00,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:00,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424704073] [2021-12-17 15:10:00,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:00,551 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:00,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:00,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:10:00,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:00,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-17 15:10:00,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-17 15:10:00,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:00,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-17 15:10:00,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,651 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-12-17 15:10:00,651 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:00,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424704073] [2021-12-17 15:10:00,652 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424704073] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:00,652 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:00,652 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:10:00,652 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1059574530] [2021-12-17 15:10:00,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:00,653 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:10:00,654 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:00,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:10:00,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:10:00,655 INFO L87 Difference]: Start difference. First operand 790 states and 993 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2021-12-17 15:10:00,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:00,901 INFO L93 Difference]: Finished difference Result 1608 states and 2017 transitions. [2021-12-17 15:10:00,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-17 15:10:00,902 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 114 [2021-12-17 15:10:00,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:00,905 INFO L225 Difference]: With dead ends: 1608 [2021-12-17 15:10:00,905 INFO L226 Difference]: Without dead ends: 826 [2021-12-17 15:10:00,907 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:10:00,910 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 345 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 223 mSolverCounterSat, 134 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 134 IncrementalHoareTripleChecker+Valid, 223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:00,910 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [354 Valid, 384 Invalid, 357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [134 Valid, 223 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:10:00,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2021-12-17 15:10:00,965 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 790. [2021-12-17 15:10:00,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 633 states have internal predecessors, (720), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (155), 105 states have call predecessors, (155), 104 states have call successors, (155) [2021-12-17 15:10:00,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 979 transitions. [2021-12-17 15:10:00,971 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 979 transitions. Word has length 114 [2021-12-17 15:10:00,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:00,971 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 979 transitions. [2021-12-17 15:10:00,971 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2021-12-17 15:10:00,971 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 979 transitions. [2021-12-17 15:10:00,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2021-12-17 15:10:00,973 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:00,974 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:00,974 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:10:00,974 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:00,975 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:00,975 INFO L85 PathProgramCache]: Analyzing trace with hash -726468575, now seen corresponding path program 1 times [2021-12-17 15:10:00,975 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:00,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528739854] [2021-12-17 15:10:00,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:00,976 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:00,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:01,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:01,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:01,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:01,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:01,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-17 15:10:01,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-17 15:10:01,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:01,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:01,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-17 15:10:01,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,119 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:10:01,119 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:01,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528739854] [2021-12-17 15:10:01,119 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528739854] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:01,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1163534278] [2021-12-17 15:10:01,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:01,120 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:01,120 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:01,121 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:01,157 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:10:01,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,213 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:10:01,222 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:01,490 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:10:01,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:01,728 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:10:01,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1163534278] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:01,729 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:01,729 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-17 15:10:01,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215347830] [2021-12-17 15:10:01,729 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:01,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-17 15:10:01,730 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:01,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-17 15:10:01,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-17 15:10:01,730 INFO L87 Difference]: Start difference. First operand 790 states and 979 transitions. Second operand has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-12-17 15:10:02,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:02,772 INFO L93 Difference]: Finished difference Result 1794 states and 2291 transitions. [2021-12-17 15:10:02,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-17 15:10:02,773 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) Word has length 111 [2021-12-17 15:10:02,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:02,777 INFO L225 Difference]: With dead ends: 1794 [2021-12-17 15:10:02,777 INFO L226 Difference]: Without dead ends: 1101 [2021-12-17 15:10:02,780 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 303 GetRequests, 253 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 667 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2021-12-17 15:10:02,780 INFO L933 BasicCegarLoop]: 252 mSDtfsCounter, 535 mSDsluCounter, 1537 mSDsCounter, 0 mSdLazyCounter, 1483 mSolverCounterSat, 257 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 536 SdHoareTripleChecker+Valid, 1789 SdHoareTripleChecker+Invalid, 1740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 257 IncrementalHoareTripleChecker+Valid, 1483 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:02,780 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [536 Valid, 1789 Invalid, 1740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [257 Valid, 1483 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-17 15:10:02,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-12-17 15:10:02,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 887. [2021-12-17 15:10:02,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 887 states, 659 states have (on average 1.1881638846737481) internal successors, (783), 710 states have internal predecessors, (783), 121 states have call successors, (121), 100 states have call predecessors, (121), 106 states have return successors, (154), 111 states have call predecessors, (154), 121 states have call successors, (154) [2021-12-17 15:10:02,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 887 states and 1058 transitions. [2021-12-17 15:10:02,813 INFO L78 Accepts]: Start accepts. Automaton has 887 states and 1058 transitions. Word has length 111 [2021-12-17 15:10:02,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:02,813 INFO L470 AbstractCegarLoop]: Abstraction has 887 states and 1058 transitions. [2021-12-17 15:10:02,813 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 8.625) internal successors, (138), 11 states have internal predecessors, (138), 5 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 5 states have call successors, (19) [2021-12-17 15:10:02,813 INFO L276 IsEmpty]: Start isEmpty. Operand 887 states and 1058 transitions. [2021-12-17 15:10:02,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2021-12-17 15:10:02,816 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:02,816 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:02,836 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:03,033 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:10:03,033 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:03,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:03,034 INFO L85 PathProgramCache]: Analyzing trace with hash 770649589, now seen corresponding path program 1 times [2021-12-17 15:10:03,034 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:03,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536051520] [2021-12-17 15:10:03,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:03,034 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:03,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:03,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:03,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:03,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:03,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:10:03,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:03,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:03,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:03,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-17 15:10:03,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:03,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-17 15:10:03,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-17 15:10:03,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-17 15:10:03,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:03,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-12-17 15:10:03,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,181 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 82 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2021-12-17 15:10:03,182 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:03,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536051520] [2021-12-17 15:10:03,182 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1536051520] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:03,182 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:03,182 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:10:03,182 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1549991264] [2021-12-17 15:10:03,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:03,182 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:10:03,182 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:03,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:10:03,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:10:03,184 INFO L87 Difference]: Start difference. First operand 887 states and 1058 transitions. Second operand has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-17 15:10:03,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:03,762 INFO L93 Difference]: Finished difference Result 2536 states and 3071 transitions. [2021-12-17 15:10:03,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-17 15:10:03,763 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 195 [2021-12-17 15:10:03,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:03,769 INFO L225 Difference]: With dead ends: 2536 [2021-12-17 15:10:03,769 INFO L226 Difference]: Without dead ends: 1657 [2021-12-17 15:10:03,771 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2021-12-17 15:10:03,772 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 483 mSDsluCounter, 602 mSDsCounter, 0 mSdLazyCounter, 800 mSolverCounterSat, 183 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 831 SdHoareTripleChecker+Invalid, 983 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 183 IncrementalHoareTripleChecker+Valid, 800 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:03,772 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [489 Valid, 831 Invalid, 983 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [183 Valid, 800 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-17 15:10:03,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2021-12-17 15:10:03,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1648. [2021-12-17 15:10:03,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1648 states, 1231 states have (on average 1.1551584077985377) internal successors, (1422), 1318 states have internal predecessors, (1422), 221 states have call successors, (221), 188 states have call predecessors, (221), 195 states have return successors, (277), 205 states have call predecessors, (277), 221 states have call successors, (277) [2021-12-17 15:10:03,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1648 states to 1648 states and 1920 transitions. [2021-12-17 15:10:03,830 INFO L78 Accepts]: Start accepts. Automaton has 1648 states and 1920 transitions. Word has length 195 [2021-12-17 15:10:03,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:03,830 INFO L470 AbstractCegarLoop]: Abstraction has 1648 states and 1920 transitions. [2021-12-17 15:10:03,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.8) internal successors, (98), 7 states have internal predecessors, (98), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-17 15:10:03,830 INFO L276 IsEmpty]: Start isEmpty. Operand 1648 states and 1920 transitions. [2021-12-17 15:10:03,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2021-12-17 15:10:03,836 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:03,837 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:03,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-17 15:10:03,837 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:03,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:03,837 INFO L85 PathProgramCache]: Analyzing trace with hash 35414297, now seen corresponding path program 1 times [2021-12-17 15:10:03,837 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:03,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817570365] [2021-12-17 15:10:03,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:03,837 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:03,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:03,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:03,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:03,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:03,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:10:03,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:03,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:03,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:03,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-17 15:10:03,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-17 15:10:03,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:03,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:03,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:03,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 150 [2021-12-17 15:10:04,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-17 15:10:04,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-17 15:10:04,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:04,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-17 15:10:04,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,016 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 93 proven. 28 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-12-17 15:10:04,016 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:04,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817570365] [2021-12-17 15:10:04,016 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817570365] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:04,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1072987607] [2021-12-17 15:10:04,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:04,017 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:04,017 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:04,031 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:04,032 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:10:04,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:04,147 INFO L263 TraceCheckSpWp]: Trace formula consists of 740 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-17 15:10:04,159 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:04,475 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 151 proven. 4 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2021-12-17 15:10:04,475 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:04,929 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2021-12-17 15:10:04,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1072987607] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:04,929 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:04,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2021-12-17 15:10:04,929 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2239232] [2021-12-17 15:10:04,929 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:04,930 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-17 15:10:04,930 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:04,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-17 15:10:04,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=527, Unknown=0, NotChecked=0, Total=650 [2021-12-17 15:10:04,931 INFO L87 Difference]: Start difference. First operand 1648 states and 1920 transitions. Second operand has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-12-17 15:10:06,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:06,186 INFO L93 Difference]: Finished difference Result 3617 states and 4344 transitions. [2021-12-17 15:10:06,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-17 15:10:06,186 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) Word has length 199 [2021-12-17 15:10:06,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:06,189 INFO L225 Difference]: With dead ends: 3617 [2021-12-17 15:10:06,189 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:10:06,197 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 489 GetRequests, 431 SyntacticMatches, 5 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 602 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=613, Invalid=2357, Unknown=0, NotChecked=0, Total=2970 [2021-12-17 15:10:06,199 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 1037 mSDsluCounter, 515 mSDsCounter, 0 mSdLazyCounter, 1955 mSolverCounterSat, 481 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1043 SdHoareTripleChecker+Valid, 670 SdHoareTripleChecker+Invalid, 2436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 481 IncrementalHoareTripleChecker+Valid, 1955 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:06,199 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1043 Valid, 670 Invalid, 2436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [481 Valid, 1955 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-17 15:10:06,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:10:06,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:10:06,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:10:06,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:10:06,200 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 199 [2021-12-17 15:10:06,200 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:06,200 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:10:06,200 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.73076923076923) internal successors, (227), 22 states have internal predecessors, (227), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-12-17 15:10:06,200 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:10:06,201 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:10:06,203 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:10:06,255 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:06,414 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-17 15:10:06,416 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:18,472 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 293 300) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse3) (or .cse0 (not (< 1 ~waterLevel~0)) .cse1 .cse2 .cse3))) [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 293 300) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2021-12-17 15:10:18,473 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (< 1 ~waterLevel~0)) .cse1 .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or .cse0 (not (= |old(~methaneLevelCritical~0)| 0)) (not (<= 1 ~switchedOnBeforeTS~0)) .cse2 (= ~methaneLevelCritical~0 0) .cse3))) [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L861 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L861 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2021-12-17 15:10:18,473 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 952 981) the Hoare annotation is: true [2021-12-17 15:10:18,473 INFO L861 garLoopResultBuilder]: At program point L977(lines 952 981) the Hoare annotation is: true [2021-12-17 15:10:18,473 INFO L858 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L861 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L854 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse8 (= 0 ~methaneLevelCritical~0)) (.cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (not .cse0))) (let ((.cse3 (and .cse13 .cse10 .cse14 .cse16 .cse11 .cse15)) (.cse4 (not .cse16)) (.cse9 (and .cse10 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse11)) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse13 .cse10 .cse14 .cse11 (<= 1 ~pumpRunning~0) (not .cse8) .cse15)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse7 .cse8 .cse9 .cse5) (or .cse0 .cse2 .cse3 .cse4 .cse7 .cse5 .cse9) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (and .cse10 (= ~waterLevel~0 1) .cse11) (not (< 1 |old(~waterLevel~0)|)) .cse5) (or .cse0 .cse1 .cse6 .cse2 .cse8 .cse5) (or .cse12 (not (= |old(~waterLevel~0)| 2))) (or .cse12 .cse7))))) [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L854 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse4) (or .cse3 .cse5 (not (< 1 |old(~waterLevel~0)|)) .cse4) (or .cse5 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse0) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))))) [2021-12-17 15:10:18,474 INFO L854 garLoopResultBuilder]: At program point L279-1(lines 260 284) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse20 (= 0 ~methaneLevelCritical~0)) (.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse22 (= ~pumpRunning~0 0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 1)) (.cse27 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (not .cse6)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (not (= ~systemActive~0 0))) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse7 (and .cse24 .cse11 .cse25 .cse27 .cse12 .cse13 .cse14 .cse26 .cse15)) (.cse8 (and .cse24 .cse11 .cse25 .cse27 .cse13 .cse14 .cse26 .cse15 .cse22)) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse16 (not .cse27)) (.cse5 (and .cse4 .cse22)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse18 (and .cse24 .cse11 .cse25 .cse13 (not .cse20) .cse14 .cse26 .cse15 .cse22)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (and .cse11 .cse4 .cse13 .cse14 .cse15 .cse22)) (.cse17 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 (and .cse4 (<= 1 ~pumpRunning~0)) .cse5 .cse0) (or .cse6 .cse7 .cse3 .cse8 .cse9 .cse10 (and .cse11 .cse4 .cse12 .cse13 .cse14 .cse15) .cse16 .cse17) (or .cse6 .cse18 .cse19 .cse9 .cse20 .cse17) (let ((.cse21 (= ~waterLevel~0 1))) (or .cse6 .cse3 (and .cse11 .cse21 .cse12 .cse13 .cse14 .cse15) (not (< 1 |old(~waterLevel~0)|)) (and .cse11 .cse21 .cse13 .cse14 .cse15 .cse22) .cse17)) (or .cse6 .cse18 .cse20 .cse23 .cse17) (or .cse0 .cse2 .cse23) (or .cse6 .cse7 .cse8 .cse19 .cse9 .cse16 .cse17) (or .cse5 .cse0 .cse1) (or .cse6 .cse3 .cse18 .cse9 .cse10 .cse20 .cse17))))) [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2021-12-17 15:10:18,474 INFO L854 garLoopResultBuilder]: At program point L308(lines 301 311) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= ~waterLevel~0 1)) (.cse9 (= 0 ~methaneLevelCritical~0)) (.cse19 (not .cse0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (and .cse12 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse14 .cse15)) (.cse8 (and .cse17 .cse12 .cse18 .cse13 (<= 1 ~pumpRunning~0) (not .cse9) .cse14 .cse19 .cse15)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (and .cse17 .cse12 .cse18 .cse16 .cse13 .cse14 .cse19 .cse15)) (.cse5 (not .cse16)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse3 .cse8 .cse9 .cse6) (or .cse10 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse2 .cse3 .cse8 .cse11 .cse9 .cse6) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse12 (= ~waterLevel~0 1) .cse13 .cse14 .cse15) .cse6) (or .cse0 .cse7 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse11))))) [2021-12-17 15:10:18,474 INFO L858 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L854 garLoopResultBuilder]: At program point L552(lines 545 554) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (and (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse1 (and .cse4 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 173 199) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L854 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse22 (= ~waterLevel~0 1)) (.cse11 (= 0 ~methaneLevelCritical~0)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse24 (= ~pumpRunning~0 0)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse27 (<= ~waterLevel~0 1)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse17 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse20 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse25 (not .cse3))) (let ((.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse26 .cse13 .cse27 .cse28 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse25)) (.cse7 (and .cse26 .cse13 .cse27 .cse28 .cse16 .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse8 (not .cse28)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse13 .cse14 .cse16 .cse18 .cse17 .cse19 .cse20 .cse24)) (.cse10 (and .cse26 .cse13 .cse27 .cse16 (not .cse11) .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse23 (and .cse13 .cse22 .cse16 .cse18 .cse17 .cse19 .cse25 .cse20 .cse24)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse21 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse3 .cse5 .cse6 .cse10 .cse11 .cse9) (or .cse3 .cse4 .cse6 .cse12 (and .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20) .cse7 .cse8 .cse21 .cse9) (or .cse3 .cse0 (and .cse13 .cse22 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20) .cse2 .cse23 .cse9) (or .cse3 .cse6 .cse12 .cse10 .cse21 .cse11 .cse9) (or .cse3 .cse0 .cse2 .cse23 .cse9 .cse11) (or (and .cse14 .cse17 .cse19 .cse24) .cse1 .cse21))))) [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L854 garLoopResultBuilder]: At program point L532(lines 527 534) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (< 1 |old(~waterLevel~0)|)) .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse3 .cse1))) [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L854 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (and .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse1 (and .cse4 .cse5 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse3)))) [2021-12-17 15:10:18,475 INFO L858 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2021-12-17 15:10:18,475 INFO L854 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse22 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 1)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse26 (not .cse0)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse13 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse24 .cse7 .cse25 .cse9 (not .cse4) .cse10 .cse11 .cse26 .cse12 .cse13)) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse17 (and .cse24 .cse7 .cse25 .cse14 .cse15 .cse9 .cse10 .cse11 .cse12)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse18 (and .cse24 .cse7 .cse25 .cse14 .cse9 .cse10 .cse11 .cse26 .cse12 .cse13)) (.cse19 (not .cse14)) (.cse16 (and .cse7 .cse22 .cse9 .cse10 .cse11 .cse12 .cse13)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse23 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse20 (not (= |old(~pumpRunning~0)| 0))) (.cse21 (and .cse22 .cse11 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse0 .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (not (< 1 |old(~waterLevel~0)|)) .cse5 (and .cse7 .cse8 .cse14 .cse15 .cse9 .cse11 .cse10 .cse12))) (or .cse0 .cse1 .cse6 .cse3 .cse16 .cse4 .cse5) (or .cse0 .cse17 .cse2 .cse3 .cse18 .cse19 .cse5) (or .cse20 .cse21 (and .cse22 (<= 1 ~pumpRunning~0) .cse11) (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse17 .cse3 .cse18 (and .cse7 .cse22 .cse15 .cse9 .cse10 .cse11 .cse12) .cse19 .cse16 .cse23 .cse5) (or .cse20 .cse23 .cse21) (or .cse6 .cse20 (not (= ~systemActive~0 0)) .cse21))))) [2021-12-17 15:10:18,476 INFO L858 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2021-12-17 15:10:18,476 INFO L858 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2021-12-17 15:10:18,476 INFO L858 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2021-12-17 15:10:18,476 INFO L854 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= 0 ~systemActive~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse1 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6 .cse7 (not .cse0) .cse8)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse10) (or .cse11 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (and .cse3 (= ~waterLevel~0 1) .cse4 .cse5 .cse6 .cse7 .cse8) (not (< 1 |old(~waterLevel~0)|)) .cse10) (or .cse11 .cse9)))) [2021-12-17 15:10:18,476 INFO L854 garLoopResultBuilder]: At program point L563-1(lines 555 583) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse3 (= ~waterLevel~0 1)) (.cse25 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse27 (<= ~waterLevel~0 1)) (.cse21 (= 0 ~methaneLevelCritical~0)) (.cse24 (not .cse0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse23 (= ~pumpRunning~0 0))) (let ((.cse15 (and .cse2 .cse16 .cse4 .cse7 .cse6 .cse8 .cse9 .cse23)) (.cse20 (and .cse26 .cse2 .cse27 .cse4 (not .cse21) .cse7 .cse6 .cse8 .cse24 .cse9 .cse23)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (and .cse26 .cse2 .cse27 .cse25 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9)) (.cse18 (and .cse26 .cse2 .cse27 .cse25 .cse4 .cse7 .cse6 .cse8 .cse24 .cse9 .cse23)) (.cse19 (not .cse25)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (and .cse2 .cse3 .cse4 .cse7 .cse6 .cse8 .cse24 .cse9 .cse23)) (.cse12 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 .cse11 .cse12) (or (and (<= 1 ~pumpRunning~0) .cse6 .cse8) (and .cse5 .cse6 .cse8) .cse13 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse14 .cse15 (and .cse2 .cse16 .cse5 .cse4 .cse6 .cse7 .cse8 .cse9) .cse17 .cse18 .cse19 .cse12) (or .cse0 .cse1 .cse14 .cse15 .cse20 .cse21 .cse12) (or .cse0 .cse22 .cse14 .cse20 .cse21 .cse12) (or .cse1 .cse13 (not (= ~systemActive~0 0)) .cse23) (or .cse1 (and .cse16 .cse5 .cse6 .cse8) .cse13 (and (= ~waterLevel~0 2) .cse16)) (or .cse0 .cse22 .cse14 .cse17 .cse18 .cse19 .cse12) (or .cse0 .cse1 .cse10 .cse11 .cse12 .cse21))))) [2021-12-17 15:10:18,476 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 173 199) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (and .cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse1 (and .cse4 .cse5 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse3)))) [2021-12-17 15:10:18,476 INFO L854 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~2#1|)) (.cse9 (not (= 0 ~methaneLevelCritical~0))) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2 (<= ~waterLevel~0 1) .cse3 (<= 1 ~pumpRunning~0) .cse4 .cse9 .cse5 (not .cse0) .cse6)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse0 (and .cse2 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse3 .cse4 .cse9 .cse5 .cse6) .cse10 .cse11 .cse12 .cse8) (or .cse13 (not (= |old(~waterLevel~0)| 2))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse10 .cse12 .cse8) (or .cse13 .cse11) (or .cse0 .cse1 .cse7 (not (= ~methaneLevelCritical~0 0)) .cse8)))) [2021-12-17 15:10:18,476 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2021-12-17 15:10:18,476 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2021-12-17 15:10:18,476 INFO L854 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse15 (= ~methaneLevelCritical~0 0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse18 (not .cse0)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse7 (and .cse16 .cse12 .cse17 .cse13 (<= 1 ~pumpRunning~0) (not .cse8) .cse18 .cse14)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (and .cse12 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse14)) (.cse3 (and .cse16 .cse12 .cse17 .cse15 .cse13 .cse18 .cse14)) (.cse4 (not .cse15)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse7 .cse1 .cse2 .cse8 .cse5) (or .cse0 .cse7 .cse2 .cse9 .cse10 .cse8 .cse5) (or .cse0 .cse11 .cse2 .cse9 .cse3 .cse4 .cse5) (or .cse6 .cse10) (or .cse0 .cse11 (and .cse12 (= ~waterLevel~0 1) .cse13 .cse14) (not (< 1 |old(~waterLevel~0)|)) .cse5))))) [2021-12-17 15:10:18,477 INFO L854 garLoopResultBuilder]: At program point L415(lines 410 417) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse3 .cse4 (<= ~waterLevel~0 2) .cse5) (and .cse0 .cse2 .cse1 .cse3 .cse5 .cse6) (and .cse0 .cse1 (= ~waterLevel~0 2) .cse3 .cse5 .cse6))) [2021-12-17 15:10:18,477 INFO L854 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse6 .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse7))) [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L854 garLoopResultBuilder]: At program point L407(lines 395 409) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~systemActive~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (<= ~waterLevel~0 2) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,477 INFO L861 garLoopResultBuilder]: At program point L1043(lines 1024 1046) the Hoare annotation is: true [2021-12-17 15:10:18,477 INFO L854 garLoopResultBuilder]: At program point L1010(lines 1006 1012) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L854 garLoopResultBuilder]: At program point L507(lines 503 509) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,477 INFO L861 garLoopResultBuilder]: At program point L483(lines 420 487) the Hoare annotation is: true [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2021-12-17 15:10:18,477 INFO L858 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse6 .cse3 (= ~methaneLevelCritical~0 0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse1 .cse3 .cse7))) [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 (<= ~waterLevel~0 2) .cse4))) [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L542(lines 537 544) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,478 INFO L861 garLoopResultBuilder]: At program point L1021(lines 1013 1023) the Hoare annotation is: true [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 (= ~pumpRunning~0 0)) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse5 .cse4))) [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L858 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (= ~pumpRunning~0 0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse1 .cse2 (= ~methaneLevelCritical~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 (= ~waterLevel~0 2) .cse2 .cse6) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse6))) [2021-12-17 15:10:18,478 INFO L854 garLoopResultBuilder]: At program point L514(lines 510 516) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 208 232) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point L372(lines 357 375) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 1))) (or .cse0 (not (= ~waterLevel~0 2)) .cse3 .cse2))) [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point L290(lines 285 292) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (= ~waterLevel~0 2)) (<= 1 ~pumpRunning~0) .cse2))) [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not .cse0) (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 (not (= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 1)) (not (= ~waterLevel~0 1)) .cse3)))) [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~waterLevel~0 2)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse1) .cse2 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 (not .cse2) .cse3 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))))) [2021-12-17 15:10:18,479 INFO L854 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2021-12-17 15:10:18,479 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse4) (or .cse5 .cse2 .cse3) (or .cse5 .cse2 .cse4))) [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 234 258) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point L391(lines 376 394) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:18,480 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2021-12-17 15:10:18,480 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 312 320) the Hoare annotation is: true [2021-12-17 15:10:18,480 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 312 320) no Hoare annotation was computed. [2021-12-17 15:10:18,482 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:18,494 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:18,573 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:18 BoogieIcfgContainer [2021-12-17 15:10:18,573 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:18,574 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:18,576 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:18,576 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:18,577 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:57" (3/4) ... [2021-12-17 15:10:18,579 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:18,584 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:18,584 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:18,584 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:18,584 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:18,584 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:18,585 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:18,585 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:18,585 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:10:18,585 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:18,597 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-17 15:10:18,598 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:18,598 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:18,598 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:18,599 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:18,599 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:18,599 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:18,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:10:18,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:10:18,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-17 15:10:18,616 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || (((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && pumpRunning == 0) [2021-12-17 15:10:18,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:18,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-17 15:10:18,618 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive))) || (((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) [2021-12-17 15:10:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((1 <= pumpRunning && \result == waterLevel) && tmp == waterLevel) || ((pumpRunning == \old(pumpRunning) && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || pumpRunning == 0)) && (((!(\old(waterLevel) <= 2) || (((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && waterLevel == \old(waterLevel)))) && ((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) [2021-12-17 15:10:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 0)) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:18,619 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-17 15:10:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && systemActive == 0) && 1 == \result) && waterLevel <= 2) && pumpRunning == 0 [2021-12-17 15:10:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result))) && ((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) [2021-12-17 15:10:18,620 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:18,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) [2021-12-17 15:10:18,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:18,621 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || (\result == 1 && pumpRunning == 0)) || waterLevel == 2) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 0)) [2021-12-17 15:10:18,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:18,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) || ((((\result == 1 && tmp___0 == 0) && \result == 0) && pumpRunning == \old(pumpRunning)) && tmp == 1))) && (((0 == systemActive || !(waterLevel == 2)) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:18,623 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) && ((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:18,653 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:18,654 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:18,654 INFO L158 Benchmark]: Toolchain (without parser) took 21904.86ms. Allocated memory was 111.1MB in the beginning and 318.8MB in the end (delta: 207.6MB). Free memory was 84.5MB in the beginning and 251.8MB in the end (delta: -167.2MB). Peak memory consumption was 39.0MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,654 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 111.1MB. Free memory is still 69.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:18,655 INFO L158 Benchmark]: CACSL2BoogieTranslator took 394.14ms. Allocated memory was 111.1MB in the beginning and 163.6MB in the end (delta: 52.4MB). Free memory was 84.3MB in the beginning and 131.3MB in the end (delta: -47.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,655 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.03ms. Allocated memory is still 163.6MB. Free memory was 131.3MB in the beginning and 129.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,655 INFO L158 Benchmark]: Boogie Preprocessor took 50.79ms. Allocated memory is still 163.6MB. Free memory was 129.1MB in the beginning and 127.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,656 INFO L158 Benchmark]: RCFGBuilder took 558.76ms. Allocated memory is still 163.6MB. Free memory was 127.1MB in the beginning and 109.7MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,656 INFO L158 Benchmark]: TraceAbstraction took 20747.44ms. Allocated memory was 163.6MB in the beginning and 318.8MB in the end (delta: 155.2MB). Free memory was 109.4MB in the beginning and 259.1MB in the end (delta: -149.7MB). Peak memory consumption was 166.2MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,656 INFO L158 Benchmark]: Witness Printer took 80.17ms. Allocated memory is still 318.8MB. Free memory was 259.1MB in the beginning and 251.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:18,658 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 111.1MB. Free memory is still 69.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 394.14ms. Allocated memory was 111.1MB in the beginning and 163.6MB in the end (delta: 52.4MB). Free memory was 84.3MB in the beginning and 131.3MB in the end (delta: -47.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.03ms. Allocated memory is still 163.6MB. Free memory was 131.3MB in the beginning and 129.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.79ms. Allocated memory is still 163.6MB. Free memory was 129.1MB in the beginning and 127.1MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 558.76ms. Allocated memory is still 163.6MB. Free memory was 127.1MB in the beginning and 109.7MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 20747.44ms. Allocated memory was 163.6MB in the beginning and 318.8MB in the end (delta: 155.2MB). Free memory was 109.4MB in the beginning and 259.1MB in the end (delta: -149.7MB). Peak memory consumption was 166.2MB. Max. memory is 16.1GB. * Witness Printer took 80.17ms. Allocated memory is still 318.8MB. Free memory was 259.1MB in the beginning and 251.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 20.6s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3660 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3610 mSDsluCounter, 7285 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5435 mSDsCounter, 1435 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5941 IncrementalHoareTripleChecker+Invalid, 7376 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1435 mSolverCounterUnsat, 1850 mSDtfsCounter, 5941 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1055 GetRequests, 831 SyntacticMatches, 7 SemanticMatches, 217 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1867 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1648occurred in iteration=11, InterpolantAutomatonStates: 190, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 406 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 3971 PreInvPairs, 4629 NumberOfFragments, 4816 HoareAnnotationTreeSize, 3971 FomulaSimplifications, 8306 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 52 FomulaSimplificationsInter, 63740 FormulaSimplificationTreeSizeReductionInter, 11.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 1305 NumberOfCodeBlocks, 1305 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1599 ConstructedInterpolants, 0 QuantifiedInterpolants, 3117 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1252 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 897/1003 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result))) && ((((((0 == systemActive || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: ((((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((1 <= pumpRunning && \result == waterLevel) && tmp == waterLevel) || ((pumpRunning == \old(pumpRunning) && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2))) && ((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && methaneLevelCritical == \result) && pumpRunning == 0)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) || pumpRunning == 0)) && (((!(\old(waterLevel) <= 2) || (((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && waterLevel == \old(waterLevel)))) && ((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) && methaneLevelCritical == \result) && tmp == waterLevel) && methaneLevelCritical == \result)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && \result == waterLevel) && tmp == waterLevel) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 < waterLevel) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && !(0 == systemActive))) || (((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: (((((((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 < \old(waterLevel))) || ((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 395]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && systemActive == 0) && 1 == \result) && waterLevel <= 2) && pumpRunning == 0 - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1006]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 1013]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) <= 2)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 < \old(waterLevel))) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(pumpRunning) == 0) || !(systemActive == 0)) || !(\old(waterLevel) == 2))) && ((((((0 == systemActive || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && ((((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && !(0 == systemActive)) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: ((((((((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((((0 == systemActive || !(1 <= \old(switchedOnBeforeTS))) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)))) && ((((0 == systemActive || !(\old(waterLevel) <= 2)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= pumpRunning) && !(0 == methaneLevelCritical)) && !(0 == systemActive))) || !(1 <= \old(switchedOnBeforeTS))) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2))) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((0 == systemActive || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && 1 <= pumpRunning) && !(0 == systemActive)) || (((((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 == tmp) && waterLevel <= 1) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((splverifierCounter == 0 && 1 == tmp) && waterLevel == 2) && 1 == \result) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 == tmp) && 1 == \result) && pumpRunning == 0) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((0 == systemActive || (\result == 1 && pumpRunning == 0)) || waterLevel == 2) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 0)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) || ((((\result == 1 && tmp___0 == 0) && \result == 0) && pumpRunning == \old(pumpRunning)) && tmp == 1))) && (((0 == systemActive || !(waterLevel == 2)) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((0 == systemActive || !(waterLevel <= 1)) || !(\old(pumpRunning) == 0)) && ((((0 == systemActive || !(1 <= switchedOnBeforeTS)) || !(waterLevel <= 1)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:18,727 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE