./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e19ca921 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a --- Real Ultimate output --- This is Ultimate 0.2.2-dev-e19ca92 [2021-12-22 11:38:42,619 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-22 11:38:42,621 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-22 11:38:42,656 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-22 11:38:42,657 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-22 11:38:42,660 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-22 11:38:42,661 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-22 11:38:42,663 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-22 11:38:42,665 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-22 11:38:42,669 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-22 11:38:42,670 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-22 11:38:42,671 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-22 11:38:42,671 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-22 11:38:42,673 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-22 11:38:42,674 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-22 11:38:42,678 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-22 11:38:42,678 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-22 11:38:42,679 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-22 11:38:42,681 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-22 11:38:42,686 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-22 11:38:42,687 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-22 11:38:42,688 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-22 11:38:42,689 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-22 11:38:42,689 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-22 11:38:42,691 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-22 11:38:42,691 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-22 11:38:42,691 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-22 11:38:42,692 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-22 11:38:42,693 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-22 11:38:42,693 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-22 11:38:42,693 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-22 11:38:42,694 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-22 11:38:42,695 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-22 11:38:42,696 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-22 11:38:42,697 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-22 11:38:42,697 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-22 11:38:42,697 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-22 11:38:42,698 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-22 11:38:42,698 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-22 11:38:42,698 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-22 11:38:42,699 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-22 11:38:42,700 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-22 11:38:42,725 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-22 11:38:42,725 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-22 11:38:42,726 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-22 11:38:42,726 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-22 11:38:42,727 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-22 11:38:42,727 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-22 11:38:42,728 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-22 11:38:42,728 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-22 11:38:42,728 INFO L138 SettingsManager]: * Use SBE=true [2021-12-22 11:38:42,729 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-22 11:38:42,729 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-22 11:38:42,730 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-22 11:38:42,730 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-22 11:38:42,730 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-22 11:38:42,730 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-22 11:38:42,730 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-22 11:38:42,731 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-22 11:38:42,731 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-22 11:38:42,731 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-22 11:38:42,731 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-22 11:38:42,731 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-22 11:38:42,731 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-22 11:38:42,732 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-22 11:38:42,732 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-22 11:38:42,732 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-22 11:38:42,732 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-22 11:38:42,732 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-22 11:38:42,734 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-22 11:38:42,734 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-22 11:38:42,734 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-22 11:38:42,735 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-22 11:38:42,735 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-22 11:38:42,735 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-22 11:38:42,735 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-22 11:38:42,735 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a [2021-12-22 11:38:42,919 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-22 11:38:42,934 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-22 11:38:42,936 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-22 11:38:42,936 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-22 11:38:42,937 INFO L275 PluginConnector]: CDTParser initialized [2021-12-22 11:38:42,938 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2021-12-22 11:38:42,977 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e56c6165/4a5bccedd6b64b6694c2e98f00b4c801/FLAGf3c059f50 [2021-12-22 11:38:43,345 INFO L306 CDTParser]: Found 1 translation units. [2021-12-22 11:38:43,345 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2021-12-22 11:38:43,357 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e56c6165/4a5bccedd6b64b6694c2e98f00b4c801/FLAGf3c059f50 [2021-12-22 11:38:43,715 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e56c6165/4a5bccedd6b64b6694c2e98f00b4c801 [2021-12-22 11:38:43,718 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-22 11:38:43,719 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-22 11:38:43,728 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-22 11:38:43,734 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-22 11:38:43,746 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-22 11:38:43,746 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.12 11:38:43" (1/1) ... [2021-12-22 11:38:43,760 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e5b45db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:43, skipping insertion in model container [2021-12-22 11:38:43,760 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.12 11:38:43" (1/1) ... [2021-12-22 11:38:43,765 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-22 11:38:43,850 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-22 11:38:44,093 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2021-12-22 11:38:44,217 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-22 11:38:44,232 INFO L203 MainTranslator]: Completed pre-run [2021-12-22 11:38:44,258 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2021-12-22 11:38:44,321 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-22 11:38:44,337 INFO L208 MainTranslator]: Completed translation [2021-12-22 11:38:44,339 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44 WrapperNode [2021-12-22 11:38:44,339 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-22 11:38:44,340 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-22 11:38:44,340 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-22 11:38:44,340 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-22 11:38:44,346 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,361 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,398 INFO L137 Inliner]: procedures = 65, calls = 180, calls flagged for inlining = 30, calls inlined = 27, statements flattened = 356 [2021-12-22 11:38:44,401 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-22 11:38:44,402 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-22 11:38:44,403 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-22 11:38:44,403 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-22 11:38:44,410 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,410 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,423 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,427 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,431 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,447 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,448 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,450 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-22 11:38:44,452 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-22 11:38:44,453 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-22 11:38:44,453 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-22 11:38:44,457 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (1/1) ... [2021-12-22 11:38:44,462 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-22 11:38:44,472 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-22 11:38:44,483 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-22 11:38:44,487 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-22 11:38:44,518 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-22 11:38:44,518 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2021-12-22 11:38:44,518 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2021-12-22 11:38:44,519 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-22 11:38:44,519 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-22 11:38:44,519 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-22 11:38:44,519 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-22 11:38:44,519 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2021-12-22 11:38:44,519 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2021-12-22 11:38:44,520 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-22 11:38:44,520 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-22 11:38:44,520 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2021-12-22 11:38:44,520 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2021-12-22 11:38:44,521 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-22 11:38:44,521 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-22 11:38:44,521 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2021-12-22 11:38:44,521 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2021-12-22 11:38:44,521 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-22 11:38:44,521 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-22 11:38:44,521 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-22 11:38:44,521 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-22 11:38:44,522 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-22 11:38:44,522 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2021-12-22 11:38:44,522 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2021-12-22 11:38:44,522 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-22 11:38:44,522 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-22 11:38:44,522 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-22 11:38:44,522 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-22 11:38:44,578 INFO L234 CfgBuilder]: Building ICFG [2021-12-22 11:38:44,579 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-22 11:38:44,880 INFO L275 CfgBuilder]: Performing block encoding [2021-12-22 11:38:44,892 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-22 11:38:44,892 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-22 11:38:44,894 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 11:38:44 BoogieIcfgContainer [2021-12-22 11:38:44,895 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-22 11:38:44,896 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-22 11:38:44,896 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-22 11:38:44,899 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-22 11:38:44,899 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.12 11:38:43" (1/3) ... [2021-12-22 11:38:44,899 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c6751ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.12 11:38:44, skipping insertion in model container [2021-12-22 11:38:44,900 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.12 11:38:44" (2/3) ... [2021-12-22 11:38:44,900 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c6751ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.12 11:38:44, skipping insertion in model container [2021-12-22 11:38:44,900 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 11:38:44" (3/3) ... [2021-12-22 11:38:44,901 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_productSimulator.cil.c [2021-12-22 11:38:44,905 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-22 11:38:44,905 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-22 11:38:44,938 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-22 11:38:44,943 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-22 11:38:44,944 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-22 11:38:44,958 INFO L276 IsEmpty]: Start isEmpty. Operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2021-12-22 11:38:44,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-12-22 11:38:44,965 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:44,966 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:44,966 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:44,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:44,970 INFO L85 PathProgramCache]: Analyzing trace with hash 1460925416, now seen corresponding path program 1 times [2021-12-22 11:38:44,977 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:44,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [466095700] [2021-12-22 11:38:44,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:44,978 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:45,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:45,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:45,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:45,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:45,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:45,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:45,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-22 11:38:45,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-22 11:38:45,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,305 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:45,306 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:45,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [466095700] [2021-12-22 11:38:45,307 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [466095700] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:45,307 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:45,307 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-22 11:38:45,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996267238] [2021-12-22 11:38:45,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:45,314 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-22 11:38:45,314 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:45,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-22 11:38:45,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-22 11:38:45,344 INFO L87 Difference]: Start difference. First operand has 148 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 120 states have internal predecessors, (141), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:45,391 INFO L93 Difference]: Finished difference Result 272 states and 376 transitions. [2021-12-22 11:38:45,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-22 11:38:45,393 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 62 [2021-12-22 11:38:45,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:45,400 INFO L225 Difference]: With dead ends: 272 [2021-12-22 11:38:45,401 INFO L226 Difference]: Without dead ends: 139 [2021-12-22 11:38:45,411 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-22 11:38:45,414 INFO L933 BasicCegarLoop]: 195 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:45,415 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 195 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-22 11:38:45,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2021-12-22 11:38:45,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 139. [2021-12-22 11:38:45,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 97 states have (on average 1.309278350515464) internal successors, (127), 112 states have internal predecessors, (127), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2021-12-22 11:38:45,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 186 transitions. [2021-12-22 11:38:45,473 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 186 transitions. Word has length 62 [2021-12-22 11:38:45,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:45,475 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 186 transitions. [2021-12-22 11:38:45,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 16.0) internal successors, (32), 2 states have internal predecessors, (32), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,475 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 186 transitions. [2021-12-22 11:38:45,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-22 11:38:45,487 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:45,488 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:45,488 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-22 11:38:45,488 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:45,489 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:45,489 INFO L85 PathProgramCache]: Analyzing trace with hash -1003270502, now seen corresponding path program 1 times [2021-12-22 11:38:45,489 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:45,489 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1556820827] [2021-12-22 11:38:45,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:45,489 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:45,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:45,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:45,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:45,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:45,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:45,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:45,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-22 11:38:45,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-22 11:38:45,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,633 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:45,633 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:45,634 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1556820827] [2021-12-22 11:38:45,634 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1556820827] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:45,634 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:45,634 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-22 11:38:45,634 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621462700] [2021-12-22 11:38:45,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:45,636 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-22 11:38:45,636 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:45,636 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-22 11:38:45,637 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-22 11:38:45,637 INFO L87 Difference]: Start difference. First operand 139 states and 186 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:45,680 INFO L93 Difference]: Finished difference Result 221 states and 296 transitions. [2021-12-22 11:38:45,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-22 11:38:45,680 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2021-12-22 11:38:45,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:45,682 INFO L225 Difference]: With dead ends: 221 [2021-12-22 11:38:45,682 INFO L226 Difference]: Without dead ends: 130 [2021-12-22 11:38:45,682 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-22 11:38:45,683 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 21 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:45,684 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 320 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-22 11:38:45,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2021-12-22 11:38:45,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 130. [2021-12-22 11:38:45,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 91 states have (on average 1.3186813186813187) internal successors, (120), 106 states have internal predecessors, (120), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2021-12-22 11:38:45,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 174 transitions. [2021-12-22 11:38:45,692 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 174 transitions. Word has length 63 [2021-12-22 11:38:45,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:45,693 INFO L470 AbstractCegarLoop]: Abstraction has 130 states and 174 transitions. [2021-12-22 11:38:45,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,695 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 174 transitions. [2021-12-22 11:38:45,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-22 11:38:45,696 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:45,696 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:45,696 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-22 11:38:45,697 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:45,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:45,697 INFO L85 PathProgramCache]: Analyzing trace with hash 742899427, now seen corresponding path program 1 times [2021-12-22 11:38:45,697 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:45,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178441870] [2021-12-22 11:38:45,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:45,698 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:45,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:45,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:45,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:45,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:45,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:45,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:45,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-22 11:38:45,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-22 11:38:45,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,809 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:45,809 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:45,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178441870] [2021-12-22 11:38:45,809 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [178441870] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:45,809 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:45,809 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-22 11:38:45,809 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786061353] [2021-12-22 11:38:45,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:45,810 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-22 11:38:45,810 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:45,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-22 11:38:45,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-22 11:38:45,810 INFO L87 Difference]: Start difference. First operand 130 states and 174 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:45,839 INFO L93 Difference]: Finished difference Result 342 states and 465 transitions. [2021-12-22 11:38:45,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-22 11:38:45,842 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 68 [2021-12-22 11:38:45,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:45,845 INFO L225 Difference]: With dead ends: 342 [2021-12-22 11:38:45,845 INFO L226 Difference]: Without dead ends: 235 [2021-12-22 11:38:45,846 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-22 11:38:45,846 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 135 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:45,847 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [135 Valid, 349 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-22 11:38:45,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2021-12-22 11:38:45,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 232. [2021-12-22 11:38:45,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 162 states have (on average 1.3518518518518519) internal successors, (219), 191 states have internal predecessors, (219), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2021-12-22 11:38:45,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 315 transitions. [2021-12-22 11:38:45,884 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 315 transitions. Word has length 68 [2021-12-22 11:38:45,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:45,885 INFO L470 AbstractCegarLoop]: Abstraction has 232 states and 315 transitions. [2021-12-22 11:38:45,885 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2021-12-22 11:38:45,885 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 315 transitions. [2021-12-22 11:38:45,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2021-12-22 11:38:45,886 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:45,887 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:45,887 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-22 11:38:45,887 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:45,888 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:45,888 INFO L85 PathProgramCache]: Analyzing trace with hash 999872991, now seen corresponding path program 1 times [2021-12-22 11:38:45,888 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:45,888 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2017519252] [2021-12-22 11:38:45,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:45,888 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:45,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:45,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:45,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:45,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:45,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:45,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:45,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-22 11:38:45,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-22 11:38:45,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:45,971 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-22 11:38:45,971 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:45,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2017519252] [2021-12-22 11:38:45,971 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2017519252] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:45,971 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:45,972 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 11:38:45,972 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1673347720] [2021-12-22 11:38:45,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:45,972 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 11:38:45,972 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:45,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 11:38:45,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-22 11:38:45,973 INFO L87 Difference]: Start difference. First operand 232 states and 315 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2021-12-22 11:38:46,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:46,099 INFO L93 Difference]: Finished difference Result 582 states and 820 transitions. [2021-12-22 11:38:46,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-22 11:38:46,100 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 72 [2021-12-22 11:38:46,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:46,102 INFO L225 Difference]: With dead ends: 582 [2021-12-22 11:38:46,103 INFO L226 Difference]: Without dead ends: 373 [2021-12-22 11:38:46,104 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-22 11:38:46,105 INFO L933 BasicCegarLoop]: 190 mSDtfsCounter, 98 mSDsluCounter, 609 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 799 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:46,105 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [99 Valid, 799 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-22 11:38:46,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2021-12-22 11:38:46,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 360. [2021-12-22 11:38:46,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 360 states, 258 states have (on average 1.317829457364341) internal successors, (340), 291 states have internal predecessors, (340), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2021-12-22 11:38:46,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 488 transitions. [2021-12-22 11:38:46,129 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 488 transitions. Word has length 72 [2021-12-22 11:38:46,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:46,129 INFO L470 AbstractCegarLoop]: Abstraction has 360 states and 488 transitions. [2021-12-22 11:38:46,129 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2021-12-22 11:38:46,129 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 488 transitions. [2021-12-22 11:38:46,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2021-12-22 11:38:46,130 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:46,131 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:46,131 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-22 11:38:46,131 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:46,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:46,131 INFO L85 PathProgramCache]: Analyzing trace with hash 997919659, now seen corresponding path program 1 times [2021-12-22 11:38:46,132 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:46,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616262517] [2021-12-22 11:38:46,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:46,132 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:46,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:46,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:46,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:46,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:46,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:46,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:46,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-22 11:38:46,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-22 11:38:46,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:46,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:46,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-22 11:38:46,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,277 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:46,277 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:46,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616262517] [2021-12-22 11:38:46,277 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616262517] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:46,278 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:46,278 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 11:38:46,278 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1801348498] [2021-12-22 11:38:46,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:46,279 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 11:38:46,280 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:46,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 11:38:46,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-22 11:38:46,280 INFO L87 Difference]: Start difference. First operand 360 states and 488 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-22 11:38:46,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:46,599 INFO L93 Difference]: Finished difference Result 1156 states and 1658 transitions. [2021-12-22 11:38:46,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-22 11:38:46,599 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) Word has length 92 [2021-12-22 11:38:46,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:46,603 INFO L225 Difference]: With dead ends: 1156 [2021-12-22 11:38:46,603 INFO L226 Difference]: Without dead ends: 819 [2021-12-22 11:38:46,604 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 26 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-22 11:38:46,605 INFO L933 BasicCegarLoop]: 206 mSDtfsCounter, 300 mSDsluCounter, 536 mSDsCounter, 0 mSdLazyCounter, 267 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 742 SdHoareTripleChecker+Invalid, 378 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 267 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:46,605 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [309 Valid, 742 Invalid, 378 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 267 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-22 11:38:46,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 819 states. [2021-12-22 11:38:46,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 819 to 690. [2021-12-22 11:38:46,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 690 states, 508 states have (on average 1.2834645669291338) internal successors, (652), 556 states have internal predecessors, (652), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2021-12-22 11:38:46,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 690 states and 922 transitions. [2021-12-22 11:38:46,637 INFO L78 Accepts]: Start accepts. Automaton has 690 states and 922 transitions. Word has length 92 [2021-12-22 11:38:46,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:46,637 INFO L470 AbstractCegarLoop]: Abstraction has 690 states and 922 transitions. [2021-12-22 11:38:46,637 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 3 states have call successors, (12), 3 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-22 11:38:46,638 INFO L276 IsEmpty]: Start isEmpty. Operand 690 states and 922 transitions. [2021-12-22 11:38:46,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2021-12-22 11:38:46,639 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:46,639 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:46,639 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-22 11:38:46,639 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:46,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:46,640 INFO L85 PathProgramCache]: Analyzing trace with hash -388283735, now seen corresponding path program 1 times [2021-12-22 11:38:46,640 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:46,640 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1472935925] [2021-12-22 11:38:46,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:46,640 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:46,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:46,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:46,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:46,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:46,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:46,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:46,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-22 11:38:46,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-22 11:38:46,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:46,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:46,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-22 11:38:46,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,702 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:46,702 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:46,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1472935925] [2021-12-22 11:38:46,702 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1472935925] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:46,702 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:46,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-22 11:38:46,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037265196] [2021-12-22 11:38:46,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:46,702 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-22 11:38:46,702 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:46,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-22 11:38:46,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-22 11:38:46,703 INFO L87 Difference]: Start difference. First operand 690 states and 922 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-22 11:38:46,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:46,901 INFO L93 Difference]: Finished difference Result 1399 states and 1949 transitions. [2021-12-22 11:38:46,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-22 11:38:46,901 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2021-12-22 11:38:46,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:46,904 INFO L225 Difference]: With dead ends: 1399 [2021-12-22 11:38:46,904 INFO L226 Difference]: Without dead ends: 732 [2021-12-22 11:38:46,906 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-22 11:38:46,907 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 95 mSDsluCounter, 494 mSDsCounter, 0 mSdLazyCounter, 183 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 656 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:46,907 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 656 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-22 11:38:46,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 732 states. [2021-12-22 11:38:46,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 732 to 702. [2021-12-22 11:38:46,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 702 states, 520 states have (on average 1.2769230769230768) internal successors, (664), 568 states have internal predecessors, (664), 107 states have call successors, (107), 64 states have call predecessors, (107), 74 states have return successors, (163), 120 states have call predecessors, (163), 107 states have call successors, (163) [2021-12-22 11:38:46,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 702 states to 702 states and 934 transitions. [2021-12-22 11:38:46,934 INFO L78 Accepts]: Start accepts. Automaton has 702 states and 934 transitions. Word has length 92 [2021-12-22 11:38:46,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:46,935 INFO L470 AbstractCegarLoop]: Abstraction has 702 states and 934 transitions. [2021-12-22 11:38:46,935 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-22 11:38:46,935 INFO L276 IsEmpty]: Start isEmpty. Operand 702 states and 934 transitions. [2021-12-22 11:38:46,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2021-12-22 11:38:46,936 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:46,936 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:46,936 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-22 11:38:46,936 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:46,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:46,937 INFO L85 PathProgramCache]: Analyzing trace with hash 1534944299, now seen corresponding path program 1 times [2021-12-22 11:38:46,937 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:46,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1636376265] [2021-12-22 11:38:46,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:46,937 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:46,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:46,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:46,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:46,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:46,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:46,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:46,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-22 11:38:46,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-22 11:38:46,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:46,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:46,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-22 11:38:46,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:46,990 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:46,990 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:46,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1636376265] [2021-12-22 11:38:46,990 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1636376265] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:46,990 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:46,990 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-22 11:38:46,990 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427086599] [2021-12-22 11:38:46,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:46,991 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-22 11:38:46,991 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:46,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-22 11:38:46,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-22 11:38:46,991 INFO L87 Difference]: Start difference. First operand 702 states and 934 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-22 11:38:47,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:47,134 INFO L93 Difference]: Finished difference Result 1259 states and 1736 transitions. [2021-12-22 11:38:47,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-22 11:38:47,135 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 92 [2021-12-22 11:38:47,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:47,137 INFO L225 Difference]: With dead ends: 1259 [2021-12-22 11:38:47,137 INFO L226 Difference]: Without dead ends: 580 [2021-12-22 11:38:47,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-22 11:38:47,140 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 97 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:47,140 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 506 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-22 11:38:47,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2021-12-22 11:38:47,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 566. [2021-12-22 11:38:47,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 566 states, 416 states have (on average 1.2668269230769231) internal successors, (527), 457 states have internal predecessors, (527), 90 states have call successors, (90), 51 states have call predecessors, (90), 59 states have return successors, (126), 97 states have call predecessors, (126), 90 states have call successors, (126) [2021-12-22 11:38:47,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 566 states to 566 states and 743 transitions. [2021-12-22 11:38:47,161 INFO L78 Accepts]: Start accepts. Automaton has 566 states and 743 transitions. Word has length 92 [2021-12-22 11:38:47,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:47,162 INFO L470 AbstractCegarLoop]: Abstraction has 566 states and 743 transitions. [2021-12-22 11:38:47,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-22 11:38:47,163 INFO L276 IsEmpty]: Start isEmpty. Operand 566 states and 743 transitions. [2021-12-22 11:38:47,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-22 11:38:47,164 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:47,164 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:47,164 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-22 11:38:47,164 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:47,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:47,165 INFO L85 PathProgramCache]: Analyzing trace with hash 1664630151, now seen corresponding path program 1 times [2021-12-22 11:38:47,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:47,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561472934] [2021-12-22 11:38:47,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:47,165 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:47,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:47,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:47,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:47,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:47,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:47,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:47,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-22 11:38:47,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-22 11:38:47,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-22 11:38:47,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:47,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:47,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-22 11:38:47,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:47,295 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-22 11:38:47,295 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:47,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561472934] [2021-12-22 11:38:47,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561472934] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:47,295 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:47,295 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-22 11:38:47,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915175814] [2021-12-22 11:38:47,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:47,296 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-22 11:38:47,296 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:47,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-22 11:38:47,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-22 11:38:47,297 INFO L87 Difference]: Start difference. First operand 566 states and 743 transitions. Second operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2021-12-22 11:38:48,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:48,167 INFO L93 Difference]: Finished difference Result 1703 states and 2381 transitions. [2021-12-22 11:38:48,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-22 11:38:48,167 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 96 [2021-12-22 11:38:48,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:48,173 INFO L225 Difference]: With dead ends: 1703 [2021-12-22 11:38:48,173 INFO L226 Difference]: Without dead ends: 1292 [2021-12-22 11:38:48,175 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 285 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-22 11:38:48,176 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 1049 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 850 mSolverCounterSat, 506 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1057 SdHoareTripleChecker+Valid, 788 SdHoareTripleChecker+Invalid, 1356 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 506 IncrementalHoareTripleChecker+Valid, 850 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:48,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1057 Valid, 788 Invalid, 1356 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [506 Valid, 850 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-22 11:38:48,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1292 states. [2021-12-22 11:38:48,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1292 to 1169. [2021-12-22 11:38:48,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 859 states have (on average 1.2630966239813737) internal successors, (1085), 949 states have internal predecessors, (1085), 185 states have call successors, (185), 104 states have call predecessors, (185), 124 states have return successors, (309), 197 states have call predecessors, (309), 185 states have call successors, (309) [2021-12-22 11:38:48,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1579 transitions. [2021-12-22 11:38:48,252 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1579 transitions. Word has length 96 [2021-12-22 11:38:48,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:48,268 INFO L470 AbstractCegarLoop]: Abstraction has 1169 states and 1579 transitions. [2021-12-22 11:38:48,268 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 8 states have internal predecessors, (59), 5 states have call successors, (13), 4 states have call predecessors, (13), 3 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2021-12-22 11:38:48,268 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1579 transitions. [2021-12-22 11:38:48,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2021-12-22 11:38:48,270 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:48,270 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:48,271 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-22 11:38:48,271 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:48,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:48,271 INFO L85 PathProgramCache]: Analyzing trace with hash -387681602, now seen corresponding path program 1 times [2021-12-22 11:38:48,271 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:48,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127796786] [2021-12-22 11:38:48,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:48,271 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:48,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:48,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:48,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:48,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:48,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:48,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:48,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-22 11:38:48,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-22 11:38:48,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-22 11:38:48,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:48,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-22 11:38:48,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-22 11:38:48,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,381 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-22 11:38:48,381 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:48,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127796786] [2021-12-22 11:38:48,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127796786] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:48,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-22 11:38:48,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-22 11:38:48,382 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1775820793] [2021-12-22 11:38:48,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:48,382 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-22 11:38:48,382 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:48,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-22 11:38:48,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-22 11:38:48,383 INFO L87 Difference]: Start difference. First operand 1169 states and 1579 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-22 11:38:48,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:48,715 INFO L93 Difference]: Finished difference Result 1932 states and 2592 transitions. [2021-12-22 11:38:48,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-22 11:38:48,715 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) Word has length 127 [2021-12-22 11:38:48,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:48,719 INFO L225 Difference]: With dead ends: 1932 [2021-12-22 11:38:48,719 INFO L226 Difference]: Without dead ends: 786 [2021-12-22 11:38:48,721 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-22 11:38:48,722 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 340 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 517 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:48,722 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [356 Valid, 517 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-22 11:38:48,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 786 states. [2021-12-22 11:38:48,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 786 to 754. [2021-12-22 11:38:48,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 754 states, 561 states have (on average 1.2531194295900179) internal successors, (703), 614 states have internal predecessors, (703), 114 states have call successors, (114), 68 states have call predecessors, (114), 78 states have return successors, (177), 120 states have call predecessors, (177), 114 states have call successors, (177) [2021-12-22 11:38:48,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 754 states to 754 states and 994 transitions. [2021-12-22 11:38:48,751 INFO L78 Accepts]: Start accepts. Automaton has 754 states and 994 transitions. Word has length 127 [2021-12-22 11:38:48,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:48,751 INFO L470 AbstractCegarLoop]: Abstraction has 754 states and 994 transitions. [2021-12-22 11:38:48,752 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 4 states have internal predecessors, (84), 4 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 3 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-22 11:38:48,752 INFO L276 IsEmpty]: Start isEmpty. Operand 754 states and 994 transitions. [2021-12-22 11:38:48,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2021-12-22 11:38:48,753 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:48,753 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:48,753 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-22 11:38:48,754 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:48,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:48,754 INFO L85 PathProgramCache]: Analyzing trace with hash 534729444, now seen corresponding path program 1 times [2021-12-22 11:38:48,754 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:48,754 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646221078] [2021-12-22 11:38:48,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:48,754 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:48,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:48,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:48,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:48,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:48,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:48,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:48,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-22 11:38:48,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-22 11:38:48,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-22 11:38:48,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:48,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-22 11:38:48,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-22 11:38:48,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:48,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2021-12-22 11:38:48,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,824 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 21 proven. 5 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2021-12-22 11:38:48,825 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:48,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646221078] [2021-12-22 11:38:48,825 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646221078] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-22 11:38:48,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [537425545] [2021-12-22 11:38:48,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:48,825 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-22 11:38:48,825 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-22 11:38:48,840 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-22 11:38:48,869 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-22 11:38:48,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:48,946 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-22 11:38:48,969 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-22 11:38:49,147 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2021-12-22 11:38:49,147 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-22 11:38:49,147 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [537425545] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-22 11:38:49,147 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-22 11:38:49,147 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-22 11:38:49,147 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [629962228] [2021-12-22 11:38:49,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-22 11:38:49,148 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-22 11:38:49,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:49,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-22 11:38:49,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-22 11:38:49,149 INFO L87 Difference]: Start difference. First operand 754 states and 994 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-22 11:38:49,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:49,190 INFO L93 Difference]: Finished difference Result 1671 states and 2245 transitions. [2021-12-22 11:38:49,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-22 11:38:49,191 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 136 [2021-12-22 11:38:49,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:49,194 INFO L225 Difference]: With dead ends: 1671 [2021-12-22 11:38:49,195 INFO L226 Difference]: Without dead ends: 940 [2021-12-22 11:38:49,197 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-22 11:38:49,197 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 94 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:49,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [94 Valid, 350 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-22 11:38:49,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2021-12-22 11:38:49,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 940. [2021-12-22 11:38:49,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 940 states, 703 states have (on average 1.2446657183499288) internal successors, (875), 762 states have internal predecessors, (875), 136 states have call successors, (136), 90 states have call predecessors, (136), 100 states have return successors, (214), 140 states have call predecessors, (214), 136 states have call successors, (214) [2021-12-22 11:38:49,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 940 states to 940 states and 1225 transitions. [2021-12-22 11:38:49,232 INFO L78 Accepts]: Start accepts. Automaton has 940 states and 1225 transitions. Word has length 136 [2021-12-22 11:38:49,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:49,232 INFO L470 AbstractCegarLoop]: Abstraction has 940 states and 1225 transitions. [2021-12-22 11:38:49,233 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-12-22 11:38:49,233 INFO L276 IsEmpty]: Start isEmpty. Operand 940 states and 1225 transitions. [2021-12-22 11:38:49,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2021-12-22 11:38:49,235 INFO L506 BasicCegarLoop]: Found error trace [2021-12-22 11:38:49,235 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:49,259 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-22 11:38:49,452 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-22 11:38:49,452 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-22 11:38:49,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-22 11:38:49,452 INFO L85 PathProgramCache]: Analyzing trace with hash -727153918, now seen corresponding path program 1 times [2021-12-22 11:38:49,453 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-22 11:38:49,453 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1011257750] [2021-12-22 11:38:49,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:49,453 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-22 11:38:49,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-22 11:38:49,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-22 11:38:49,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-22 11:38:49,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-22 11:38:49,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-22 11:38:49,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-22 11:38:49,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-22 11:38:49,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-22 11:38:49,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:49,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-22 11:38:49,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:49,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-12-22 11:38:49,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-22 11:38:49,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-22 11:38:49,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-22 11:38:49,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-22 11:38:49,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-22 11:38:49,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,564 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 9 proven. 22 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-22 11:38:49,564 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-22 11:38:49,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1011257750] [2021-12-22 11:38:49,564 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1011257750] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-22 11:38:49,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [4819645] [2021-12-22 11:38:49,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-22 11:38:49,565 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-22 11:38:49,565 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-22 11:38:49,572 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-22 11:38:49,608 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-22 11:38:49,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-22 11:38:49,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 610 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-22 11:38:49,723 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-22 11:38:49,959 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 28 proven. 12 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2021-12-22 11:38:49,959 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-22 11:38:50,217 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 20 proven. 11 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-22 11:38:50,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [4819645] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-22 11:38:50,218 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-22 11:38:50,218 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-22 11:38:50,218 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1311866002] [2021-12-22 11:38:50,218 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-22 11:38:50,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-22 11:38:50,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-22 11:38:50,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-22 11:38:50,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-22 11:38:50,219 INFO L87 Difference]: Start difference. First operand 940 states and 1225 transitions. Second operand has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2021-12-22 11:38:51,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-22 11:38:51,474 INFO L93 Difference]: Finished difference Result 1805 states and 2408 transitions. [2021-12-22 11:38:51,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2021-12-22 11:38:51,474 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) Word has length 138 [2021-12-22 11:38:51,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-22 11:38:51,476 INFO L225 Difference]: With dead ends: 1805 [2021-12-22 11:38:51,476 INFO L226 Difference]: Without dead ends: 0 [2021-12-22 11:38:51,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 364 GetRequests, 318 SyntacticMatches, 1 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 565 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2021-12-22 11:38:51,481 INFO L933 BasicCegarLoop]: 311 mSDtfsCounter, 720 mSDsluCounter, 1081 mSDsCounter, 0 mSdLazyCounter, 1295 mSolverCounterSat, 407 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 1392 SdHoareTripleChecker+Invalid, 1702 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 407 IncrementalHoareTripleChecker+Valid, 1295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-22 11:38:51,481 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [726 Valid, 1392 Invalid, 1702 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [407 Valid, 1295 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-22 11:38:51,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-22 11:38:51,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-22 11:38:51,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-22 11:38:51,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-22 11:38:51,482 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 138 [2021-12-22 11:38:51,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-22 11:38:51,483 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-22 11:38:51,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.266666666666667) internal successors, (154), 10 states have internal predecessors, (154), 6 states have call successors, (37), 7 states have call predecessors, (37), 6 states have return successors, (33), 8 states have call predecessors, (33), 6 states have call successors, (33) [2021-12-22 11:38:51,483 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-22 11:38:51,483 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-22 11:38:51,485 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-22 11:38:51,504 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-22 11:38:51,702 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-22 11:38:51,704 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-22 11:38:58,999 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 985 992) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:58,999 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 985 992) no Hoare annotation was computed. [2021-12-22 11:38:58,999 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 985 992) no Hoare annotation was computed. [2021-12-22 11:38:58,999 INFO L858 garLoopResultBuilder]: For program point activatePump__before__methaneQueryFINAL(lines 943 950) no Hoare annotation was computed. [2021-12-22 11:38:58,999 INFO L854 garLoopResultBuilder]: At program point activatePump__before__methaneQueryENTRY(lines 943 950) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0)) (= 0 ~__SELECTED_FEATURE_highWaterSensor~0) (not (<= ~waterLevel~0 2))) [2021-12-22 11:38:58,999 INFO L858 garLoopResultBuilder]: For program point activatePump__before__methaneQueryEXIT(lines 943 950) no Hoare annotation was computed. [2021-12-22 11:38:59,000 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 1004 1012) no Hoare annotation was computed. [2021-12-22 11:38:59,000 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 1004 1012) the Hoare annotation is: true [2021-12-22 11:38:59,000 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 1004 1012) no Hoare annotation was computed. [2021-12-22 11:38:59,000 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2021-12-22 11:38:59,000 INFO L858 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2021-12-22 11:38:59,000 INFO L854 garLoopResultBuilder]: At program point L1064(lines 1049 1067) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse2 (not .cse3))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse5 .cse6 .cse9 .cse7 .cse2)) (.cse1 (not .cse7)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (and .cse5 .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse7 (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)) .cse8 .cse1 .cse3 .cse4) (or .cse0 .cse8 .cse1 (not .cse9) .cse4))))) [2021-12-22 11:38:59,000 INFO L854 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not .cse1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse0 (not (<= 2 ~waterLevel~0)) .cse2 .cse4) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse4))))) [2021-12-22 11:38:59,000 INFO L854 garLoopResultBuilder]: At program point L962(line 962) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2021-12-22 11:38:59,000 INFO L854 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point L962-1(lines 951 967) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point L834-1(lines 815 839) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not .cse1))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 (not .cse4) .cse2 .cse5) (or .cse3 (= ~pumpRunning~0 0) (and (<= 1 ~pumpRunning~0) .cse4) .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0 (and (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse5))))) [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point processEnvironment__before__lowWaterSensorENTRY(lines 840 856) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,001 INFO L858 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2021-12-22 11:38:59,001 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorFINAL(lines 840 856) no Hoare annotation was computed. [2021-12-22 11:38:59,001 INFO L858 garLoopResultBuilder]: For program point L149(lines 149 155) no Hoare annotation was computed. [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse6 (not .cse1))) (.cse0 (not .cse6)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse2)))) [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse4 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse1))) [2021-12-22 11:38:59,001 INFO L854 garLoopResultBuilder]: At program point L979-1(lines 968 984) the Hoare annotation is: (let ((.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (not .cse1))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 .cse7 .cse8)) (.cse0 (not .cse7)) (.cse6 (and (<= 1 ~pumpRunning~0) .cse5 .cse7 .cse8)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse3 .cse0) (or .cse3 .cse4 .cse0 (not .cse5) .cse6 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse6 .cse2))))) [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L1058(lines 1058 1062) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorEXIT(lines 840 856) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L1058-2(lines 1058 1062) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L854 garLoopResultBuilder]: At program point L154(lines 145 158) the Hoare annotation is: (let ((.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse3)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse8)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7 .cse8 .cse2 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse4 .cse5 (and .cse6 (= |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1| 1))) (or .cse0 .cse1 (not .cse7) .cse4 .cse5))))) [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L823(lines 823 831) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L819(lines 819 836) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 982) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L861 garLoopResultBuilder]: At program point select_oneENTRY(lines 274 283) the Hoare annotation is: true [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point select_oneFINAL(lines 274 283) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point select_oneEXIT(lines 274 283) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L96-1(lines 92 103) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 92 103) the Hoare annotation is: true [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 92 103) no Hoare annotation was computed. [2021-12-22 11:38:59,002 INFO L858 garLoopResultBuilder]: For program point L1142(lines 1142 1152) no Hoare annotation was computed. [2021-12-22 11:38:59,003 INFO L858 garLoopResultBuilder]: For program point L787(lines 787 793) no Hoare annotation was computed. [2021-12-22 11:38:59,003 INFO L854 garLoopResultBuilder]: At program point L915(line 915) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2021-12-22 11:38:59,003 INFO L858 garLoopResultBuilder]: For program point L1138(lines 1138 1155) no Hoare annotation was computed. [2021-12-22 11:38:59,003 INFO L858 garLoopResultBuilder]: For program point L787-2(lines 783 805) no Hoare annotation was computed. [2021-12-22 11:38:59,008 INFO L854 garLoopResultBuilder]: At program point L1138-1(lines 1130 1158) the Hoare annotation is: (let ((.cse6 (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (= 1 ~systemActive~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse10 (<= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse12 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (<= 2 ~waterLevel~0) .cse2 .cse8 .cse9 (not .cse14) .cse10)) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (not .cse2)) (.cse16 (not (<= 1 |old(~pumpRunning~0)|))) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~waterLevel~0 1)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or .cse0 (and .cse6 .cse1 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse13) (or (and .cse1 .cse2 .cse9) .cse0 .cse5 .cse14 .cse15 .cse11) (or .cse0 (and .cse1 .cse9) .cse14 .cse11 .cse12) (or .cse0 .cse4 (and .cse1 .cse3) .cse12) (or .cse0 .cse5 .cse15 .cse11 (and .cse6 .cse1 .cse7 .cse2 .cse8 .cse9 .cse10) .cse13) (let ((.cse17 (<= ~waterLevel~0 2))) (or .cse5 .cse16 .cse14 (and .cse1 .cse2 .cse17 .cse18) .cse11 (and .cse19 .cse17 .cse18) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or (and .cse1 .cse2 .cse3 .cse18) .cse5 .cse16 .cse14 (and .cse19 .cse3 .cse18) .cse11 .cse13)))) [2021-12-22 11:38:59,008 INFO L854 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2021-12-22 11:38:59,010 INFO L854 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2021-12-22 11:38:59,010 INFO L858 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2021-12-22 11:38:59,010 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 780 806) no Hoare annotation was computed. [2021-12-22 11:38:59,010 INFO L854 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse2 .cse8 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse2 (and .cse9 (= ~waterLevel~0 1))) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse8 .cse3 .cse4 .cse7)))) [2021-12-22 11:38:59,011 INFO L854 garLoopResultBuilder]: At program point L920-1(lines 901 925) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2021-12-22 11:38:59,011 INFO L858 garLoopResultBuilder]: For program point L1143(lines 1143 1149) no Hoare annotation was computed. [2021-12-22 11:38:59,011 INFO L854 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse9 (= ~waterLevel~0 1)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse7) (or .cse0 .cse6 .cse2 (and .cse8 .cse9)) (or .cse0 .cse4 .cse5 .cse7) (or .cse2 .cse10 .cse3 (and .cse11 .cse9 .cse12) .cse4 .cse7) (or .cse2 .cse10 .cse3 .cse4 (and .cse11 (<= ~waterLevel~0 2) .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-22 11:38:59,011 INFO L854 garLoopResultBuilder]: At program point L937-1(lines 926 942) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (and .cse11 .cse16)) (.cse5 (not .cse15)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse15 .cse14 .cse16 (not .cse1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 (and .cse7 .cse8 .cse9) .cse2 .cse10 (and .cse11 .cse8 .cse9)) (or .cse0 .cse4 .cse5 (and .cse11 .cse8)) (or .cse0 .cse12 .cse5 .cse2 .cse13 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse5 .cse6 .cse1 (and .cse11 .cse14 .cse9) .cse2 (and .cse7 .cse14 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse12 .cse5 .cse1 .cse2 .cse13)))) [2021-12-22 11:38:59,011 INFO L854 garLoopResultBuilder]: At program point L1127(lines 1120 1129) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (and .cse12 .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse12 (= ~waterLevel~0 1))) (.cse8 (not (= 0 ~systemActive~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse3 .cse4) (or .cse6 .cse7 .cse1 .cse4 .cse5) (or .cse6 .cse7 .cse4 .cse8 .cse5) (or .cse6 .cse9 .cse1 .cse10) (or .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse6 .cse9 .cse10 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-22 11:38:59,012 INFO L858 garLoopResultBuilder]: For program point L322(line 322) no Hoare annotation was computed. [2021-12-22 11:38:59,012 INFO L854 garLoopResultBuilder]: At program point L1140(line 1140) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse12 (and .cse10 .cse7)) (.cse13 (not (= 0 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse3 (and .cse6 .cse7 .cse8) .cse4 .cse9 (and .cse10 .cse7 .cse8)) (or .cse0 .cse11 .cse2 .cse12) (or .cse0 .cse4 .cse13 .cse9) (or .cse0 .cse1 .cse3 .cse4 .cse13) (or .cse0 .cse11 .cse12 .cse13) (let ((.cse14 (<= ~waterLevel~0 2))) (or .cse2 .cse5 .cse3 (and .cse10 .cse14 .cse8) .cse4 (and .cse6 .cse14 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (or .cse0 .cse2 .cse4 .cse9)))) [2021-12-22 11:38:59,012 INFO L858 garLoopResultBuilder]: For program point L1140-1(line 1140) no Hoare annotation was computed. [2021-12-22 11:38:59,012 INFO L858 garLoopResultBuilder]: For program point L909(lines 909 917) no Hoare annotation was computed. [2021-12-22 11:38:59,012 INFO L854 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse18 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse20 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= ~pumpRunning~0 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse13 .cse19)) (.cse0 (and .cse13 .cse18 .cse19 .cse20)) (.cse8 (and (<= 1 ~pumpRunning~0) .cse18 (<= 2 ~waterLevel~0) .cse17 .cse16 .cse19 (not .cse7) .cse20)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse15 (and .cse13 .cse11)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not .cse17)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse6 .cse7 .cse2 .cse8) (or .cse6 .cse9 .cse7 (and .cse10 .cse11 .cse12) .cse2 .cse4 (and .cse13 .cse11 .cse12)) (or .cse1 .cse14 .cse6 .cse15) (or .cse1 .cse5 .cse7 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse2 .cse8 .cse4) (or .cse1 .cse14 .cse15 .cse3) (or .cse6 .cse9 .cse7 (and .cse13 .cse16 .cse12) .cse2 (and .cse10 .cse16 .cse12) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-22 11:38:59,012 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 922) no Hoare annotation was computed. [2021-12-22 11:38:59,013 INFO L854 garLoopResultBuilder]: At program point L323(lines 318 325) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse5 .cse6 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse3 .cse7) (or .cse5 .cse6 .cse1 .cse2 .cse7) (or .cse0 .cse5 .cse1 .cse2) (or .cse0 .cse4 .cse5) (or .cse0 .cse5 .cse2 .cse7))) [2021-12-22 11:38:59,013 INFO L858 garLoopResultBuilder]: For program point L930(lines 930 940) no Hoare annotation was computed. [2021-12-22 11:38:59,013 INFO L858 garLoopResultBuilder]: For program point L794-1(lines 794 800) no Hoare annotation was computed. [2021-12-22 11:38:59,013 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 780 806) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2021-12-22 11:38:59,019 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 780 806) no Hoare annotation was computed. [2021-12-22 11:38:59,020 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 322) no Hoare annotation was computed. [2021-12-22 11:38:59,020 INFO L858 garLoopResultBuilder]: For program point L72(lines 72 76) no Hoare annotation was computed. [2021-12-22 11:38:59,020 INFO L854 garLoopResultBuilder]: At program point L72-2(lines 68 79) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse7 .cse1 (and .cse8 (= ~waterLevel~0 1) .cse9) .cse2 .cse5) (or .cse6 .cse7 .cse1 .cse2 (and .cse8 (<= ~waterLevel~0 2) .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse4 .cse6) (or .cse0 .cse6 .cse2 .cse5))) [2021-12-22 11:38:59,020 INFO L854 garLoopResultBuilder]: At program point L1125(line 1125) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse5 (and .cse11 .cse12 (= ~waterLevel~0 1))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (and .cse11 .cse12 .cse13)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse7 .cse8 .cse2 .cse3 .cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse7 .cse2 .cse3) (or .cse7 .cse8 .cse2 .cse3 .cse9 .cse10) (or .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse10)))) [2021-12-22 11:38:59,020 INFO L858 garLoopResultBuilder]: For program point L1125-1(line 1125) no Hoare annotation was computed. [2021-12-22 11:38:59,021 INFO L858 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2021-12-22 11:38:59,021 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 171 200) no Hoare annotation was computed. [2021-12-22 11:38:59,021 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 171 200) the Hoare annotation is: true [2021-12-22 11:38:59,021 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 189) no Hoare annotation was computed. [2021-12-22 11:38:59,021 INFO L861 garLoopResultBuilder]: At program point L185-1(lines 185 189) the Hoare annotation is: true [2021-12-22 11:38:59,021 INFO L858 garLoopResultBuilder]: For program point L182(line 182) no Hoare annotation was computed. [2021-12-22 11:38:59,021 INFO L861 garLoopResultBuilder]: At program point L181-2(lines 181 195) the Hoare annotation is: true [2021-12-22 11:38:59,027 INFO L861 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: true [2021-12-22 11:38:59,027 INFO L858 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2021-12-22 11:38:59,028 INFO L861 garLoopResultBuilder]: At program point L196(lines 171 200) the Hoare annotation is: true [2021-12-22 11:38:59,028 INFO L861 garLoopResultBuilder]: At program point processEnvironment__before__highWaterSensorFINAL(lines 807 813) the Hoare annotation is: true [2021-12-22 11:38:59,028 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__highWaterSensorEXIT(lines 807 813) no Hoare annotation was computed. [2021-12-22 11:38:59,028 INFO L854 garLoopResultBuilder]: At program point L1117(lines 1112 1119) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,028 INFO L854 garLoopResultBuilder]: At program point L1093(line 1093) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2021-12-22 11:38:59,028 INFO L854 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,028 INFO L858 garLoopResultBuilder]: For program point L292-1(line 292) no Hoare annotation was computed. [2021-12-22 11:38:59,028 INFO L858 garLoopResultBuilder]: For program point L259(lines 259 266) no Hoare annotation was computed. [2021-12-22 11:38:59,029 INFO L858 garLoopResultBuilder]: For program point L259-2(lines 259 266) no Hoare annotation was computed. [2021-12-22 11:38:59,029 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-22 11:38:59,029 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-22 11:38:59,029 INFO L854 garLoopResultBuilder]: At program point L763(lines 704 764) the Hoare annotation is: false [2021-12-22 11:38:59,029 INFO L861 garLoopResultBuilder]: At program point L243(lines 235 245) the Hoare annotation is: true [2021-12-22 11:38:59,029 INFO L861 garLoopResultBuilder]: At program point L268(lines 249 271) the Hoare annotation is: true [2021-12-22 11:38:59,029 INFO L858 garLoopResultBuilder]: For program point L747(lines 747 757) no Hoare annotation was computed. [2021-12-22 11:38:59,029 INFO L854 garLoopResultBuilder]: At program point L747-1(lines 735 758) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2021-12-22 11:38:59,030 INFO L854 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,030 INFO L858 garLoopResultBuilder]: For program point L293-1(line 293) no Hoare annotation was computed. [2021-12-22 11:38:59,030 INFO L858 garLoopResultBuilder]: For program point L706(lines 705 762) no Hoare annotation was computed. [2021-12-22 11:38:59,030 INFO L858 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2021-12-22 11:38:59,030 INFO L858 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2021-12-22 11:38:59,030 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2021-12-22 11:38:59,030 INFO L854 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,059 INFO L858 garLoopResultBuilder]: For program point L294-1(line 294) no Hoare annotation was computed. [2021-12-22 11:38:59,059 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2021-12-22 11:38:59,060 INFO L854 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,060 INFO L858 garLoopResultBuilder]: For program point L295-1(line 295) no Hoare annotation was computed. [2021-12-22 11:38:59,060 INFO L861 garLoopResultBuilder]: At program point L766(lines 695 770) the Hoare annotation is: true [2021-12-22 11:38:59,060 INFO L858 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2021-12-22 11:38:59,067 INFO L858 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2021-12-22 11:38:59,067 INFO L854 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2021-12-22 11:38:59,067 INFO L854 garLoopResultBuilder]: At program point L230(lines 226 232) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,067 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-22 11:38:59,067 INFO L854 garLoopResultBuilder]: At program point L313(lines 308 316) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L297(lines 284 299) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,068 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-22 11:38:59,068 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 758) no Hoare annotation was computed. [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L760(lines 705 762) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse6 .cse2 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse8 .cse6 .cse2 .cse3 .cse7 (<= 1 ~switchedOnBeforeTS~0)) (and .cse8 .cse1 .cse6 .cse2 .cse3 .cse7))) [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L1107(lines 1102 1109) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse6 .cse5 .cse1 .cse2 .cse3 .cse4))) [2021-12-22 11:38:59,068 INFO L854 garLoopResultBuilder]: At program point L1099(lines 1087 1101) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~systemActive~0))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 (not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) .cse3))) [2021-12-22 11:38:59,068 INFO L858 garLoopResultBuilder]: For program point L1091(lines 1091 1097) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L854 garLoopResultBuilder]: At program point L290(line 290) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point L1091-1(lines 1091 1097) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point L290-1(line 290) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L854 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point L291-1(line 291) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 80 91) no Hoare annotation was computed. [2021-12-22 11:38:59,069 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 80 91) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse4) (or .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 .cse7 .cse1 .cse8) (or .cse1 .cse6 .cse9 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse0 .cse7 .cse8 .cse5) (or .cse1 .cse6 .cse9 .cse2 .cse3 .cse4))) [2021-12-22 11:38:59,069 INFO L858 garLoopResultBuilder]: For program point L84-1(lines 80 91) no Hoare annotation was computed. [2021-12-22 11:38:59,070 INFO L854 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,070 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmEXIT(lines 883 899) no Hoare annotation was computed. [2021-12-22 11:38:59,070 INFO L854 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,070 INFO L854 garLoopResultBuilder]: At program point L164(lines 159 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,070 INFO L854 garLoopResultBuilder]: At program point L868(line 868) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,070 INFO L858 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2021-12-22 11:38:59,070 INFO L858 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmFINAL(lines 883 899) no Hoare annotation was computed. [2021-12-22 11:38:59,070 INFO L858 garLoopResultBuilder]: For program point L862(lines 862 879) no Hoare annotation was computed. [2021-12-22 11:38:59,070 INFO L854 garLoopResultBuilder]: At program point L1083(lines 1068 1086) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,071 INFO L854 garLoopResultBuilder]: At program point processEnvironment__before__methaneAlarmENTRY(lines 883 899) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-22 11:38:59,071 INFO L858 garLoopResultBuilder]: For program point L1077(lines 1077 1081) no Hoare annotation was computed. [2021-12-22 11:38:59,071 INFO L858 garLoopResultBuilder]: For program point L1077-2(lines 1077 1081) no Hoare annotation was computed. [2021-12-22 11:38:59,071 INFO L854 garLoopResultBuilder]: At program point L877(line 877) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse3 .cse4 .cse0) (or .cse3 .cse4 .cse0 .cse1 .cse2))) [2021-12-22 11:38:59,071 INFO L854 garLoopResultBuilder]: At program point L877-1(lines 858 882) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~__SELECTED_FEATURE_highWaterSensor~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not .cse7)) (.cse5 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 (not .cse2))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse1) (or .cse4 .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse1 (not .cse6) .cse5 .cse3)))) [2021-12-22 11:38:59,071 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 993 1003) the Hoare annotation is: true [2021-12-22 11:38:59,071 INFO L861 garLoopResultBuilder]: At program point L109(lines 104 112) the Hoare annotation is: true [2021-12-22 11:38:59,071 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 993 1003) no Hoare annotation was computed. [2021-12-22 11:38:59,071 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 993 1003) no Hoare annotation was computed. [2021-12-22 11:38:59,074 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-22 11:38:59,075 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-22 11:38:59,150 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.12 11:38:59 BoogieIcfgContainer [2021-12-22 11:38:59,155 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-22 11:38:59,155 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-22 11:38:59,155 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-22 11:38:59,155 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-22 11:38:59,156 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.12 11:38:44" (3/4) ... [2021-12-22 11:38:59,158 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-22 11:38:59,161 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure activatePump__before__methaneQuery [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__lowWaterSensor [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure select_one [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__highWaterSensor [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-22 11:38:59,162 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__methaneAlarm [2021-12-22 11:38:59,163 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-22 11:38:59,173 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-22 11:38:59,174 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-22 11:38:59,175 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-22 11:38:59,175 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-22 11:38:59,175 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-22 11:38:59,176 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-22 11:38:59,176 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-22 11:38:59,192 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-22 11:38:59,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-22 11:38:59,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2021-12-22 11:38:59,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-22 11:38:59,194 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2021-12-22 11:38:59,194 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-22 11:38:59,194 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2021-12-22 11:38:59,194 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) [2021-12-22 11:38:59,196 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-22 11:38:59,198 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-22 11:38:59,198 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) [2021-12-22 11:38:59,198 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2021-12-22 11:38:59,198 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) [2021-12-22 11:38:59,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-22 11:38:59,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) [2021-12-22 11:38:59,236 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-22 11:38:59,236 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-22 11:38:59,236 INFO L158 Benchmark]: Toolchain (without parser) took 15516.80ms. Allocated memory was 90.2MB in the beginning and 207.6MB in the end (delta: 117.4MB). Free memory was 49.8MB in the beginning and 163.7MB in the end (delta: -113.9MB). Peak memory consumption was 3.4MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,236 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 90.2MB. Free memory is still 67.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-22 11:38:59,238 INFO L158 Benchmark]: CACSL2BoogieTranslator took 611.11ms. Allocated memory is still 90.2MB. Free memory was 49.7MB in the beginning and 56.6MB in the end (delta: -6.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,238 INFO L158 Benchmark]: Boogie Procedure Inliner took 61.61ms. Allocated memory is still 90.2MB. Free memory was 56.6MB in the beginning and 53.8MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,239 INFO L158 Benchmark]: Boogie Preprocessor took 49.16ms. Allocated memory is still 90.2MB. Free memory was 53.8MB in the beginning and 51.9MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,239 INFO L158 Benchmark]: RCFGBuilder took 442.39ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 51.9MB in the beginning and 85.1MB in the end (delta: -33.2MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,239 INFO L158 Benchmark]: TraceAbstraction took 14258.89ms. Allocated memory was 109.1MB in the beginning and 207.6MB in the end (delta: 98.6MB). Free memory was 84.6MB in the beginning and 174.2MB in the end (delta: -89.6MB). Peak memory consumption was 127.2MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,240 INFO L158 Benchmark]: Witness Printer took 80.80ms. Allocated memory is still 207.6MB. Free memory was 174.2MB in the beginning and 163.7MB in the end (delta: 10.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-22 11:38:59,241 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 90.2MB. Free memory is still 67.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 611.11ms. Allocated memory is still 90.2MB. Free memory was 49.7MB in the beginning and 56.6MB in the end (delta: -6.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 61.61ms. Allocated memory is still 90.2MB. Free memory was 56.6MB in the beginning and 53.8MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 49.16ms. Allocated memory is still 90.2MB. Free memory was 53.8MB in the beginning and 51.9MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 442.39ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 51.9MB in the beginning and 85.1MB in the end (delta: -33.2MB). Peak memory consumption was 24.1MB. Max. memory is 16.1GB. * TraceAbstraction took 14258.89ms. Allocated memory was 109.1MB in the beginning and 207.6MB in the end (delta: 98.6MB). Free memory was 84.6MB in the beginning and 174.2MB in the end (delta: -89.6MB). Peak memory consumption was 127.2MB. Max. memory is 16.1GB. * Witness Printer took 80.80ms. Allocated memory is still 207.6MB. Free memory was 174.2MB in the beginning and 163.7MB in the end (delta: 10.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 322]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 148 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.1s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3006 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2949 mSDsluCounter, 6614 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4340 mSDsCounter, 1252 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3196 IncrementalHoareTripleChecker+Invalid, 4448 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1252 mSolverCounterUnsat, 2274 mSDtfsCounter, 3196 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 825 GetRequests, 696 SyntacticMatches, 2 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 902 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1169occurred in iteration=8, InterpolantAutomatonStates: 122, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 344 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 71 LocationsWithAnnotation, 4651 PreInvPairs, 5165 NumberOfFragments, 5849 HoareAnnotationTreeSize, 4651 FomulaSimplifications, 5811 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 71 FomulaSimplificationsInter, 21936 FormulaSimplificationTreeSizeReductionInter, 6.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 1312 NumberOfCodeBlocks, 1312 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1436 ConstructedInterpolants, 0 QuantifiedInterpolants, 2650 SizeOfPredicates, 3 NumberOfNonLiveVariables, 1219 ConjunctsInSsa, 11 ConjunctsInUnsatCore, 14 InterpolantComputations, 10 PerfectInterpolantSequences, 827/877 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1120]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((((1 <= pumpRunning && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1130]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((((1 < tmp && pumpRunning == 0) && \result <= 2) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((1 <= pumpRunning && 1 < tmp) && \result <= 2) && 2 <= waterLevel) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || ((((((1 < tmp && pumpRunning == 0) && \result <= 2) && 1 == systemActive) && tmp <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 68]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 318]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || !(0 == __SELECTED_FEATURE_highWaterSensor))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((tmp == 1 && \result == 1) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 1087]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 1068]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 1049]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || ((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 0 == systemActive)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == __SELECTED_FEATURE_highWaterSensor)) - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(\old(waterLevel) <= 2)) || (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && !(0 == __SELECTED_FEATURE_highWaterSensor))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 == __SELECTED_FEATURE_highWaterSensor)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) || (pumpRunning == 0 && \result == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor)) && \result == 0)) - InvariantResult [Line: 1112]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && !(0 == __SELECTED_FEATURE_highWaterSensor))) || !(waterLevel <= 2)) - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2))) && ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || 0 == __SELECTED_FEATURE_highWaterSensor) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-12-22 11:38:59,311 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE