./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 06:13:51,571 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 06:13:51,573 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 06:13:51,589 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 06:13:51,590 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 06:13:51,590 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 06:13:51,591 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 06:13:51,593 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 06:13:51,594 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 06:13:51,594 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 06:13:51,595 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 06:13:51,596 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 06:13:51,596 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 06:13:51,597 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 06:13:51,598 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 06:13:51,598 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 06:13:51,599 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 06:13:51,600 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 06:13:51,601 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 06:13:51,602 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 06:13:51,603 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 06:13:51,605 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 06:13:51,606 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 06:13:51,606 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 06:13:51,609 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 06:13:51,609 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 06:13:51,609 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 06:13:51,610 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 06:13:51,610 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 06:13:51,611 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 06:13:51,611 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 06:13:51,612 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 06:13:51,612 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 06:13:51,613 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 06:13:51,613 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 06:13:51,614 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 06:13:51,614 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 06:13:51,614 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 06:13:51,615 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 06:13:51,615 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 06:13:51,616 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 06:13:51,616 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 06:13:51,632 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 06:13:51,632 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 06:13:51,632 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 06:13:51,632 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 06:13:51,633 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 06:13:51,633 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 06:13:51,633 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 06:13:51,633 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 06:13:51,633 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 06:13:51,634 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 06:13:51,634 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 06:13:51,635 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 06:13:51,635 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 06:13:51,635 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 06:13:51,635 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 06:13:51,635 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 06:13:51,636 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 06:13:51,637 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 06:13:51,637 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 06:13:51,637 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 06:13:51,637 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 06:13:51,637 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 06:13:51,637 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 06:13:51,637 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 06:13:51,638 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 06:13:51,638 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 06:13:51,638 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 06:13:51,638 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 06:13:51,638 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 62c2cf132c1af8470eae7f9b6621445fd5b91c1643db1f71bf7213022a4dec0a [2022-12-14 06:13:51,823 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 06:13:51,838 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 06:13:51,839 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 06:13:51,840 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 06:13:51,840 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 06:13:51,841 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-12-14 06:13:54,335 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 06:13:54,513 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 06:13:54,513 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c [2022-12-14 06:13:54,521 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/data/5574adbd5/83d771b86c724776a8bf54416b37f90d/FLAG0b8f28308 [2022-12-14 06:13:54,531 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/data/5574adbd5/83d771b86c724776a8bf54416b37f90d [2022-12-14 06:13:54,534 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 06:13:54,535 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 06:13:54,536 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 06:13:54,536 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 06:13:54,539 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 06:13:54,539 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,540 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@36f43865 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54, skipping insertion in model container [2022-12-14 06:13:54,540 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,546 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 06:13:54,574 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 06:13:54,706 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-12-14 06:13:54,762 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 06:13:54,771 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 06:13:54,789 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/sv-benchmarks/c/product-lines/minepump_spec5_productSimulator.cil.c[5724,5737] [2022-12-14 06:13:54,820 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 06:13:54,833 INFO L208 MainTranslator]: Completed translation [2022-12-14 06:13:54,833 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54 WrapperNode [2022-12-14 06:13:54,834 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 06:13:54,834 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 06:13:54,834 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 06:13:54,835 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 06:13:54,840 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,850 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,869 INFO L138 Inliner]: procedures = 65, calls = 124, calls flagged for inlining = 30, calls inlined = 27, statements flattened = 300 [2022-12-14 06:13:54,869 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 06:13:54,869 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 06:13:54,870 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 06:13:54,870 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 06:13:54,877 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,877 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,879 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,879 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,883 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,886 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,887 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,889 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,891 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 06:13:54,892 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 06:13:54,892 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 06:13:54,892 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 06:13:54,892 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (1/1) ... [2022-12-14 06:13:54,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 06:13:54,906 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:13:54,916 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 06:13:54,918 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 06:13:54,945 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 06:13:54,945 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-12-14 06:13:54,945 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-12-14 06:13:54,945 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 06:13:54,945 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 06:13:54,945 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 06:13:54,945 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 06:13:54,946 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-12-14 06:13:54,946 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-12-14 06:13:54,946 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-14 06:13:54,946 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-14 06:13:54,946 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-12-14 06:13:54,946 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-12-14 06:13:54,946 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-12-14 06:13:54,946 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-12-14 06:13:54,947 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-12-14 06:13:54,947 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-12-14 06:13:54,947 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-12-14 06:13:54,947 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-12-14 06:13:54,947 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-14 06:13:54,947 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-14 06:13:54,947 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 06:13:54,948 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-12-14 06:13:54,948 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-12-14 06:13:54,948 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-14 06:13:54,948 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-14 06:13:54,948 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 06:13:54,948 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 06:13:55,016 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 06:13:55,017 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 06:13:55,281 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 06:13:55,360 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 06:13:55,360 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 06:13:55,362 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:13:55 BoogieIcfgContainer [2022-12-14 06:13:55,362 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 06:13:55,364 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 06:13:55,364 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 06:13:55,366 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 06:13:55,366 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 06:13:54" (1/3) ... [2022-12-14 06:13:55,367 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@517661e9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 06:13:55, skipping insertion in model container [2022-12-14 06:13:55,367 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:13:54" (2/3) ... [2022-12-14 06:13:55,367 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@517661e9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 06:13:55, skipping insertion in model container [2022-12-14 06:13:55,367 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:13:55" (3/3) ... [2022-12-14 06:13:55,368 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_productSimulator.cil.c [2022-12-14 06:13:55,381 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 06:13:55,381 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 06:13:55,416 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 06:13:55,421 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4c024510, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 06:13:55,421 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 06:13:55,424 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 82 states have internal predecessors, (93), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-12-14 06:13:55,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 06:13:55,432 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:55,432 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:55,432 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:55,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:55,436 INFO L85 PathProgramCache]: Analyzing trace with hash -1749623699, now seen corresponding path program 1 times [2022-12-14 06:13:55,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:55,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [654994882] [2022-12-14 06:13:55,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:55,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:55,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:55,585 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-12-14 06:13:55,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:55,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [654994882] [2022-12-14 06:13:55,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [654994882] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:55,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:55,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 06:13:55,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [952219586] [2022-12-14 06:13:55,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:55,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 06:13:55,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:55,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 06:13:55,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 06:13:55,613 INFO L87 Difference]: Start difference. First operand has 110 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 82 states have internal predecessors, (93), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 06:13:55,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:55,674 INFO L93 Difference]: Finished difference Result 204 states and 288 transitions. [2022-12-14 06:13:55,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 06:13:55,675 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 45 [2022-12-14 06:13:55,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:55,682 INFO L225 Difference]: With dead ends: 204 [2022-12-14 06:13:55,682 INFO L226 Difference]: Without dead ends: 105 [2022-12-14 06:13:55,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 06:13:55,687 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:55,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 129 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:13:55,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2022-12-14 06:13:55,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2022-12-14 06:13:55,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 63 states have (on average 1.3492063492063493) internal successors, (85), 78 states have internal predecessors, (85), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-12-14 06:13:55,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 144 transitions. [2022-12-14 06:13:55,720 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 144 transitions. Word has length 45 [2022-12-14 06:13:55,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:55,721 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 144 transitions. [2022-12-14 06:13:55,721 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 06:13:55,721 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 144 transitions. [2022-12-14 06:13:55,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-14 06:13:55,723 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:55,723 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:55,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 06:13:55,723 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:55,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:55,724 INFO L85 PathProgramCache]: Analyzing trace with hash -595180854, now seen corresponding path program 1 times [2022-12-14 06:13:55,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:55,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000836464] [2022-12-14 06:13:55,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:55,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:55,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:55,823 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-12-14 06:13:55,823 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:55,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000836464] [2022-12-14 06:13:55,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000836464] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:55,824 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:55,824 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 06:13:55,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006092341] [2022-12-14 06:13:55,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:55,826 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:13:55,826 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:55,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:13:55,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:13:55,827 INFO L87 Difference]: Start difference. First operand 105 states and 144 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 06:13:55,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:55,867 INFO L93 Difference]: Finished difference Result 167 states and 229 transitions. [2022-12-14 06:13:55,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:13:55,868 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 46 [2022-12-14 06:13:55,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:55,869 INFO L225 Difference]: With dead ends: 167 [2022-12-14 06:13:55,869 INFO L226 Difference]: Without dead ends: 97 [2022-12-14 06:13:55,869 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:13:55,870 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 16 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:55,870 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 212 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:13:55,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-12-14 06:13:55,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-12-14 06:13:55,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 58 states have (on average 1.3620689655172413) internal successors, (79), 73 states have internal predecessors, (79), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-12-14 06:13:55,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 133 transitions. [2022-12-14 06:13:55,879 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 133 transitions. Word has length 46 [2022-12-14 06:13:55,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:55,879 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 133 transitions. [2022-12-14 06:13:55,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 06:13:55,879 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 133 transitions. [2022-12-14 06:13:55,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 06:13:55,880 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:55,880 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:55,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 06:13:55,880 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:55,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:55,881 INFO L85 PathProgramCache]: Analyzing trace with hash 782152187, now seen corresponding path program 1 times [2022-12-14 06:13:55,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:55,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [869404847] [2022-12-14 06:13:55,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:55,881 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:55,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:56,025 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2022-12-14 06:13:56,026 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:56,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [869404847] [2022-12-14 06:13:56,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [869404847] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:56,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:56,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 06:13:56,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093175573] [2022-12-14 06:13:56,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:56,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 06:13:56,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:56,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 06:13:56,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:13:56,028 INFO L87 Difference]: Start difference. First operand 97 states and 133 transitions. Second operand has 6 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-12-14 06:13:56,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:56,216 INFO L93 Difference]: Finished difference Result 235 states and 337 transitions. [2022-12-14 06:13:56,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 06:13:56,217 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) Word has length 49 [2022-12-14 06:13:56,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:56,219 INFO L225 Difference]: With dead ends: 235 [2022-12-14 06:13:56,219 INFO L226 Difference]: Without dead ends: 154 [2022-12-14 06:13:56,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-12-14 06:13:56,222 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 82 mSDsluCounter, 408 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 538 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:56,222 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 538 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:13:56,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2022-12-14 06:13:56,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 150. [2022-12-14 06:13:56,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 95 states have (on average 1.3263157894736841) internal successors, (126), 112 states have internal predecessors, (126), 35 states have call successors, (35), 19 states have call predecessors, (35), 19 states have return successors, (45), 33 states have call predecessors, (45), 35 states have call successors, (45) [2022-12-14 06:13:56,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 206 transitions. [2022-12-14 06:13:56,243 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 206 transitions. Word has length 49 [2022-12-14 06:13:56,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:56,243 INFO L495 AbstractCegarLoop]: Abstraction has 150 states and 206 transitions. [2022-12-14 06:13:56,243 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.4) internal successors, (27), 5 states have internal predecessors, (27), 1 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 1 states have call successors, (8) [2022-12-14 06:13:56,244 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 206 transitions. [2022-12-14 06:13:56,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-12-14 06:13:56,245 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:56,246 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:56,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 06:13:56,246 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:56,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:56,247 INFO L85 PathProgramCache]: Analyzing trace with hash 978653062, now seen corresponding path program 1 times [2022-12-14 06:13:56,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:56,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1273580883] [2022-12-14 06:13:56,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:56,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:56,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:56,596 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-12-14 06:13:56,596 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:56,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1273580883] [2022-12-14 06:13:56,596 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1273580883] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:56,596 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:56,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 06:13:56,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48953223] [2022-12-14 06:13:56,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:56,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 06:13:56,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:56,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 06:13:56,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:13:56,598 INFO L87 Difference]: Start difference. First operand 150 states and 206 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 5 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 5 states have call successors, (11) [2022-12-14 06:13:56,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:56,815 INFO L93 Difference]: Finished difference Result 421 states and 589 transitions. [2022-12-14 06:13:56,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 06:13:56,816 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 5 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 5 states have call successors, (11) Word has length 67 [2022-12-14 06:13:56,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:56,819 INFO L225 Difference]: With dead ends: 421 [2022-12-14 06:13:56,819 INFO L226 Difference]: Without dead ends: 287 [2022-12-14 06:13:56,820 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2022-12-14 06:13:56,822 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 172 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 200 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 200 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:56,822 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 440 Invalid, 229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 200 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 06:13:56,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2022-12-14 06:13:56,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 240. [2022-12-14 06:13:56,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 157 states have (on average 1.3184713375796178) internal successors, (207), 180 states have internal predecessors, (207), 50 states have call successors, (50), 29 states have call predecessors, (50), 32 states have return successors, (69), 50 states have call predecessors, (69), 50 states have call successors, (69) [2022-12-14 06:13:56,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 326 transitions. [2022-12-14 06:13:56,854 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 326 transitions. Word has length 67 [2022-12-14 06:13:56,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:56,855 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 326 transitions. [2022-12-14 06:13:56,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 5 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 5 states have call successors, (11) [2022-12-14 06:13:56,855 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 326 transitions. [2022-12-14 06:13:56,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-12-14 06:13:56,857 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:56,858 INFO L195 NwaCegarLoop]: trace histogram [6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:56,858 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 06:13:56,858 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:56,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:56,858 INFO L85 PathProgramCache]: Analyzing trace with hash 1699594942, now seen corresponding path program 1 times [2022-12-14 06:13:56,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:56,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950389142] [2022-12-14 06:13:56,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:56,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:56,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:57,174 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-12-14 06:13:57,175 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:57,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950389142] [2022-12-14 06:13:57,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950389142] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:57,175 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:57,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 06:13:57,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144104766] [2022-12-14 06:13:57,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:57,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 06:13:57,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:57,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 06:13:57,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-12-14 06:13:57,177 INFO L87 Difference]: Start difference. First operand 240 states and 326 transitions. Second operand has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 5 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-12-14 06:13:57,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:57,688 INFO L93 Difference]: Finished difference Result 593 states and 814 transitions. [2022-12-14 06:13:57,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 06:13:57,689 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 5 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) Word has length 70 [2022-12-14 06:13:57,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:57,691 INFO L225 Difference]: With dead ends: 593 [2022-12-14 06:13:57,691 INFO L226 Difference]: Without dead ends: 420 [2022-12-14 06:13:57,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-12-14 06:13:57,693 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 398 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 492 mSolverCounterSat, 175 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 411 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 667 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 492 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:57,693 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [411 Valid, 371 Invalid, 667 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 492 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 06:13:57,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 420 states. [2022-12-14 06:13:57,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 420 to 381. [2022-12-14 06:13:57,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 253 states have (on average 1.3122529644268774) internal successors, (332), 290 states have internal predecessors, (332), 76 states have call successors, (76), 43 states have call predecessors, (76), 51 states have return successors, (107), 82 states have call predecessors, (107), 76 states have call successors, (107) [2022-12-14 06:13:57,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 515 transitions. [2022-12-14 06:13:57,723 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 515 transitions. Word has length 70 [2022-12-14 06:13:57,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:57,724 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 515 transitions. [2022-12-14 06:13:57,724 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 5 states have call successors, (13), 3 states have call predecessors, (13), 2 states have return successors, (12), 5 states have call predecessors, (12), 5 states have call successors, (12) [2022-12-14 06:13:57,724 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 515 transitions. [2022-12-14 06:13:57,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-12-14 06:13:57,725 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:57,725 INFO L195 NwaCegarLoop]: trace histogram [6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:57,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 06:13:57,726 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:57,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:57,726 INFO L85 PathProgramCache]: Analyzing trace with hash -650124766, now seen corresponding path program 1 times [2022-12-14 06:13:57,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:57,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1073004699] [2022-12-14 06:13:57,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:57,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:57,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:57,833 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2022-12-14 06:13:57,833 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:57,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1073004699] [2022-12-14 06:13:57,833 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1073004699] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:13:57,833 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:13:57,833 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 06:13:57,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1924305471] [2022-12-14 06:13:57,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:13:57,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 06:13:57,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:13:57,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 06:13:57,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-14 06:13:57,835 INFO L87 Difference]: Start difference. First operand 381 states and 515 transitions. Second operand has 8 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-12-14 06:13:58,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:13:58,311 INFO L93 Difference]: Finished difference Result 802 states and 1146 transitions. [2022-12-14 06:13:58,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 06:13:58,311 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 88 [2022-12-14 06:13:58,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:13:58,315 INFO L225 Difference]: With dead ends: 802 [2022-12-14 06:13:58,315 INFO L226 Difference]: Without dead ends: 608 [2022-12-14 06:13:58,316 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=71, Invalid=271, Unknown=0, NotChecked=0, Total=342 [2022-12-14 06:13:58,316 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 199 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 773 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 804 SdHoareTripleChecker+Invalid, 832 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 773 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 06:13:58,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 804 Invalid, 832 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 773 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 06:13:58,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2022-12-14 06:13:58,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 553. [2022-12-14 06:13:58,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 553 states, 371 states have (on average 1.3099730458221024) internal successors, (486), 420 states have internal predecessors, (486), 104 states have call successors, (104), 67 states have call predecessors, (104), 77 states have return successors, (157), 110 states have call predecessors, (157), 104 states have call successors, (157) [2022-12-14 06:13:58,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 553 states to 553 states and 747 transitions. [2022-12-14 06:13:58,352 INFO L78 Accepts]: Start accepts. Automaton has 553 states and 747 transitions. Word has length 88 [2022-12-14 06:13:58,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:13:58,352 INFO L495 AbstractCegarLoop]: Abstraction has 553 states and 747 transitions. [2022-12-14 06:13:58,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 6.571428571428571) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-12-14 06:13:58,353 INFO L276 IsEmpty]: Start isEmpty. Operand 553 states and 747 transitions. [2022-12-14 06:13:58,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-12-14 06:13:58,354 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:13:58,354 INFO L195 NwaCegarLoop]: trace histogram [6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:13:58,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 06:13:58,355 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:13:58,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:13:58,355 INFO L85 PathProgramCache]: Analyzing trace with hash 637477869, now seen corresponding path program 1 times [2022-12-14 06:13:58,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:13:58,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154537278] [2022-12-14 06:13:58,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:58,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:13:58,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:58,447 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 24 proven. 7 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-12-14 06:13:58,447 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:13:58,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154537278] [2022-12-14 06:13:58,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154537278] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:13:58,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2104156704] [2022-12-14 06:13:58,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:13:58,448 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:13:58,448 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:13:58,449 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:13:58,450 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 06:13:58,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:13:58,551 INFO L263 TraceCheckSpWp]: Trace formula consists of 460 conjuncts, 8 conjunts are in the unsatisfiable core [2022-12-14 06:13:58,558 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:13:58,674 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 26 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-14 06:13:58,674 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:13:58,844 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 15 proven. 11 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-12-14 06:13:58,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2104156704] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:13:58,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1708873167] [2022-12-14 06:13:58,864 INFO L159 IcfgInterpreter]: Started Sifa with 61 locations of interest [2022-12-14 06:13:58,864 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:13:58,868 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:13:58,873 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:13:58,874 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:14:02,091 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 89 for LOIs [2022-12-14 06:14:02,102 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 65 for LOIs [2022-12-14 06:14:02,547 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__methaneAlarm with input of size 79 for LOIs [2022-12-14 06:14:02,624 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 74 for LOIs [2022-12-14 06:14:02,631 INFO L197 IcfgInterpreter]: Interpreting procedure select_one with input of size 86 for LOIs [2022-12-14 06:14:02,641 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__lowWaterSensor with input of size 77 for LOIs [2022-12-14 06:14:02,837 INFO L197 IcfgInterpreter]: Interpreting procedure activatePump__before__methaneQuery with input of size 81 for LOIs [2022-12-14 06:14:02,844 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:14:11,347 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6941#(and (<= ~__SELECTED_FEATURE_highWaterSensor~0 2147483647) (<= 0 |old(~pumpRunning~0)|) (= ~__SELECTED_FEATURE_methaneQuery~0 0) (= ~methaneLevelCritical~0 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (<= |old(~pumpRunning~0)| 2147483647) (= 1 ~systemActive~0) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_startCommand~0)) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_highWaterSensor~0)) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 1) (<= 2 |old(~waterLevel~0)|) (<= ~__SELECTED_FEATURE_startCommand~0 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| |timeShift_getWaterLevel_#res#1|) (<= 2 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (= ~head~0.base 0) (= |#NULL.offset| 0) (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) (= ~__SELECTED_FEATURE_base~0 1) (<= 0 (+ ~__SELECTED_FEATURE_stopCommand~0 2147483648)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= ~__SELECTED_FEATURE_stopCommand~0 2147483647) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 06:14:11,348 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 06:14:11,348 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:14:11,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 6, 6] total 10 [2022-12-14 06:14:11,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428249079] [2022-12-14 06:14:11,348 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 06:14:11,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-12-14 06:14:11,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:11,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-12-14 06:14:11,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=317, Invalid=2989, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 06:14:11,351 INFO L87 Difference]: Start difference. First operand 553 states and 747 transitions. Second operand has 10 states, 8 states have (on average 13.375) internal successors, (107), 9 states have internal predecessors, (107), 7 states have call successors, (27), 5 states have call predecessors, (27), 7 states have return successors, (31), 7 states have call predecessors, (31), 7 states have call successors, (31) [2022-12-14 06:14:11,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:12,000 INFO L93 Difference]: Finished difference Result 1099 states and 1502 transitions. [2022-12-14 06:14:12,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 06:14:12,000 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 13.375) internal successors, (107), 9 states have internal predecessors, (107), 7 states have call successors, (27), 5 states have call predecessors, (27), 7 states have return successors, (31), 7 states have call predecessors, (31), 7 states have call successors, (31) Word has length 106 [2022-12-14 06:14:12,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:12,004 INFO L225 Difference]: With dead ends: 1099 [2022-12-14 06:14:12,004 INFO L226 Difference]: Without dead ends: 632 [2022-12-14 06:14:12,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 268 SyntacticMatches, 6 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1987 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=421, Invalid=4549, Unknown=0, NotChecked=0, Total=4970 [2022-12-14 06:14:12,009 INFO L413 NwaCegarLoop]: 184 mSDtfsCounter, 254 mSDsluCounter, 833 mSDsCounter, 0 mSdLazyCounter, 987 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 269 SdHoareTripleChecker+Valid, 1017 SdHoareTripleChecker+Invalid, 1151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 987 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:12,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [269 Valid, 1017 Invalid, 1151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 987 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 06:14:12,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 632 states. [2022-12-14 06:14:12,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 632 to 543. [2022-12-14 06:14:12,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 356 states have (on average 1.2865168539325842) internal successors, (458), 400 states have internal predecessors, (458), 105 states have call successors, (105), 74 states have call predecessors, (105), 81 states have return successors, (147), 109 states have call predecessors, (147), 105 states have call successors, (147) [2022-12-14 06:14:12,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 710 transitions. [2022-12-14 06:14:12,065 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 710 transitions. Word has length 106 [2022-12-14 06:14:12,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:12,066 INFO L495 AbstractCegarLoop]: Abstraction has 543 states and 710 transitions. [2022-12-14 06:14:12,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 13.375) internal successors, (107), 9 states have internal predecessors, (107), 7 states have call successors, (27), 5 states have call predecessors, (27), 7 states have return successors, (31), 7 states have call predecessors, (31), 7 states have call successors, (31) [2022-12-14 06:14:12,066 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 710 transitions. [2022-12-14 06:14:12,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-12-14 06:14:12,069 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:12,069 INFO L195 NwaCegarLoop]: trace histogram [6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:12,075 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 06:14:12,270 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:12,270 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:12,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:12,271 INFO L85 PathProgramCache]: Analyzing trace with hash -444171661, now seen corresponding path program 1 times [2022-12-14 06:14:12,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:12,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458388473] [2022-12-14 06:14:12,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:12,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:12,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:12,435 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 36 proven. 18 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-12-14 06:14:12,435 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:12,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1458388473] [2022-12-14 06:14:12,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1458388473] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:12,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1249199527] [2022-12-14 06:14:12,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:12,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:12,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:12,437 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:12,438 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 06:14:12,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:12,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 539 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:14:12,536 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:12,549 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-12-14 06:14:12,549 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 06:14:12,550 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1249199527] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:12,550 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 06:14:12,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 10 [2022-12-14 06:14:12,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1972835135] [2022-12-14 06:14:12,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:12,551 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:14:12,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:12,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:14:12,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-12-14 06:14:12,552 INFO L87 Difference]: Start difference. First operand 543 states and 710 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-12-14 06:14:12,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:12,619 INFO L93 Difference]: Finished difference Result 1222 states and 1618 transitions. [2022-12-14 06:14:12,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:14:12,619 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 131 [2022-12-14 06:14:12,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:12,623 INFO L225 Difference]: With dead ends: 1222 [2022-12-14 06:14:12,623 INFO L226 Difference]: Without dead ends: 714 [2022-12-14 06:14:12,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=66, Unknown=0, NotChecked=0, Total=90 [2022-12-14 06:14:12,625 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 36 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:12,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 254 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:14:12,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 714 states. [2022-12-14 06:14:12,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 714 to 697. [2022-12-14 06:14:12,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 697 states, 462 states have (on average 1.29004329004329) internal successors, (596), 519 states have internal predecessors, (596), 131 states have call successors, (131), 95 states have call predecessors, (131), 103 states have return successors, (186), 132 states have call predecessors, (186), 131 states have call successors, (186) [2022-12-14 06:14:12,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 697 states to 697 states and 913 transitions. [2022-12-14 06:14:12,665 INFO L78 Accepts]: Start accepts. Automaton has 697 states and 913 transitions. Word has length 131 [2022-12-14 06:14:12,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:12,666 INFO L495 AbstractCegarLoop]: Abstraction has 697 states and 913 transitions. [2022-12-14 06:14:12,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-12-14 06:14:12,666 INFO L276 IsEmpty]: Start isEmpty. Operand 697 states and 913 transitions. [2022-12-14 06:14:12,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2022-12-14 06:14:12,668 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:12,668 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:12,674 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 06:14:12,869 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:12,869 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:12,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:12,869 INFO L85 PathProgramCache]: Analyzing trace with hash 2028560983, now seen corresponding path program 2 times [2022-12-14 06:14:12,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:12,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680255259] [2022-12-14 06:14:12,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:12,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:12,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:13,002 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 65 proven. 30 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2022-12-14 06:14:13,002 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:13,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680255259] [2022-12-14 06:14:13,002 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680255259] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:13,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1265977543] [2022-12-14 06:14:13,003 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 06:14:13,003 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:13,003 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:13,004 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:13,004 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 06:14:13,080 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 06:14:13,080 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 06:14:13,082 INFO L263 TraceCheckSpWp]: Trace formula consists of 355 conjuncts, 32 conjunts are in the unsatisfiable core [2022-12-14 06:14:13,086 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:13,245 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 77 proven. 3 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2022-12-14 06:14:13,245 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:14:13,401 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 53 proven. 2 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-12-14 06:14:13,401 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1265977543] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:14:13,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1010466494] [2022-12-14 06:14:13,404 INFO L159 IcfgInterpreter]: Started Sifa with 68 locations of interest [2022-12-14 06:14:13,404 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:14:13,404 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:14:13,404 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:14:13,404 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:14:19,477 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 84 for LOIs [2022-12-14 06:14:19,486 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 81 for LOIs [2022-12-14 06:14:20,042 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__methaneAlarm with input of size 80 for LOIs [2022-12-14 06:14:20,118 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 53 for LOIs [2022-12-14 06:14:20,120 INFO L197 IcfgInterpreter]: Interpreting procedure select_one with input of size 86 for LOIs [2022-12-14 06:14:20,134 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__lowWaterSensor with input of size 78 for LOIs [2022-12-14 06:14:20,335 INFO L197 IcfgInterpreter]: Interpreting procedure activatePump__before__methaneQuery with input of size 81 for LOIs [2022-12-14 06:14:20,343 INFO L197 IcfgInterpreter]: Interpreting procedure deactivatePump with input of size 53 for LOIs [2022-12-14 06:14:20,346 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:14:32,278 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13777#(and (<= 0 (+ ~__SELECTED_FEATURE_lowWaterSensor~0 2147483648)) (<= ~__SELECTED_FEATURE_lowWaterSensor~0 2147483647) (<= 0 (+ ~__SELECTED_FEATURE_methaneQuery~0 2147483648)) (<= ~__SELECTED_FEATURE_highWaterSensor~0 2147483647) (<= 0 ~systemActive~0) (<= ~__GUIDSL_ROOT_PRODUCTION~0 1) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (<= 0 (+ 2147483648 |old(~pumpRunning~0)|)) (= ~head~0.offset 0) (<= 1 ~__GUIDSL_ROOT_PRODUCTION~0) (<= 1 ~__SELECTED_FEATURE_base~0) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 2147483647) (<= 0 (+ ~__SELECTED_FEATURE_methaneAlarm~0 2147483648)) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 0)) (<= |old(~pumpRunning~0)| 2147483647) (<= |#NULL.offset| 0) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_startCommand~0)) (<= ~__SELECTED_FEATURE_methaneQuery~0 2147483647) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_highWaterSensor~0)) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (<= ~methaneLevelCritical~0 0) (<= ~__SELECTED_FEATURE_startCommand~0 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (<= ~__SELECTED_FEATURE_methaneAlarm~0 2147483647) (<= ~head~0.base 0) (<= 0 (+ ~pumpRunning~0 2147483648)) (<= ~__SELECTED_FEATURE_base~0 1) (<= 0 (+ |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2147483648)) (<= 0 |#NULL.offset|) (<= 0 (+ ~__SELECTED_FEATURE_stopCommand~0 2147483648)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= ~__SELECTED_FEATURE_stopCommand~0 2147483647) (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 06:14:32,278 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 06:14:32,278 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:14:32,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 10] total 22 [2022-12-14 06:14:32,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685520553] [2022-12-14 06:14:32,279 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 06:14:32,280 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 06:14:32,280 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:32,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 06:14:32,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=502, Invalid=5660, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 06:14:32,283 INFO L87 Difference]: Start difference. First operand 697 states and 913 transitions. Second operand has 22 states, 19 states have (on average 7.315789473684211) internal successors, (139), 20 states have internal predecessors, (139), 10 states have call successors, (32), 7 states have call predecessors, (32), 9 states have return successors, (33), 12 states have call predecessors, (33), 10 states have call successors, (33) [2022-12-14 06:14:36,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:36,010 INFO L93 Difference]: Finished difference Result 2312 states and 3143 transitions. [2022-12-14 06:14:36,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-12-14 06:14:36,011 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 19 states have (on average 7.315789473684211) internal successors, (139), 20 states have internal predecessors, (139), 10 states have call successors, (32), 7 states have call predecessors, (32), 9 states have return successors, (33), 12 states have call predecessors, (33), 10 states have call successors, (33) Word has length 149 [2022-12-14 06:14:36,011 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:36,017 INFO L225 Difference]: With dead ends: 2312 [2022-12-14 06:14:36,017 INFO L226 Difference]: Without dead ends: 1655 [2022-12-14 06:14:36,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 575 GetRequests, 404 SyntacticMatches, 12 SemanticMatches, 159 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10466 ImplicationChecksByTransitivity, 14.0s TimeCoverageRelationStatistics Valid=1948, Invalid=23812, Unknown=0, NotChecked=0, Total=25760 [2022-12-14 06:14:36,023 INFO L413 NwaCegarLoop]: 330 mSDtfsCounter, 1419 mSDsluCounter, 2228 mSDsCounter, 0 mSdLazyCounter, 3733 mSolverCounterSat, 1436 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1423 SdHoareTripleChecker+Valid, 2558 SdHoareTripleChecker+Invalid, 5169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1436 IncrementalHoareTripleChecker+Valid, 3733 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:36,023 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1423 Valid, 2558 Invalid, 5169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1436 Valid, 3733 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-12-14 06:14:36,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1655 states. [2022-12-14 06:14:36,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1655 to 1104. [2022-12-14 06:14:36,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1104 states, 723 states have (on average 1.2669432918395573) internal successors, (916), 814 states have internal predecessors, (916), 205 states have call successors, (205), 157 states have call predecessors, (205), 175 states have return successors, (315), 209 states have call predecessors, (315), 205 states have call successors, (315) [2022-12-14 06:14:36,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1104 states to 1104 states and 1436 transitions. [2022-12-14 06:14:36,154 INFO L78 Accepts]: Start accepts. Automaton has 1104 states and 1436 transitions. Word has length 149 [2022-12-14 06:14:36,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:36,154 INFO L495 AbstractCegarLoop]: Abstraction has 1104 states and 1436 transitions. [2022-12-14 06:14:36,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 19 states have (on average 7.315789473684211) internal successors, (139), 20 states have internal predecessors, (139), 10 states have call successors, (32), 7 states have call predecessors, (32), 9 states have return successors, (33), 12 states have call predecessors, (33), 10 states have call successors, (33) [2022-12-14 06:14:36,155 INFO L276 IsEmpty]: Start isEmpty. Operand 1104 states and 1436 transitions. [2022-12-14 06:14:36,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2022-12-14 06:14:36,157 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:36,157 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:36,163 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 06:14:36,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:36,358 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:36,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:36,358 INFO L85 PathProgramCache]: Analyzing trace with hash 194590208, now seen corresponding path program 1 times [2022-12-14 06:14:36,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:36,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1512587675] [2022-12-14 06:14:36,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:36,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:36,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:36,397 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 44 proven. 5 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-12-14 06:14:36,397 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:36,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1512587675] [2022-12-14 06:14:36,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1512587675] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:36,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1120595355] [2022-12-14 06:14:36,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:36,397 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:36,397 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:36,398 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:36,399 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 06:14:36,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:36,481 INFO L263 TraceCheckSpWp]: Trace formula consists of 567 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:14:36,493 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:36,528 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-12-14 06:14:36,529 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 06:14:36,529 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1120595355] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:36,529 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 06:14:36,529 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 4 [2022-12-14 06:14:36,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [109002855] [2022-12-14 06:14:36,529 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:36,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:14:36,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:36,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:14:36,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:36,530 INFO L87 Difference]: Start difference. First operand 1104 states and 1436 transitions. Second operand has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:36,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:36,689 INFO L93 Difference]: Finished difference Result 3011 states and 3984 transitions. [2022-12-14 06:14:36,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:14:36,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) Word has length 141 [2022-12-14 06:14:36,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:36,696 INFO L225 Difference]: With dead ends: 3011 [2022-12-14 06:14:36,696 INFO L226 Difference]: Without dead ends: 1940 [2022-12-14 06:14:36,699 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:36,700 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 73 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 256 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:36,700 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 256 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:14:36,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1940 states. [2022-12-14 06:14:36,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1940 to 1911. [2022-12-14 06:14:36,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1911 states, 1270 states have (on average 1.252755905511811) internal successors, (1591), 1421 states have internal predecessors, (1591), 336 states have call successors, (336), 269 states have call predecessors, (336), 304 states have return successors, (551), 340 states have call predecessors, (551), 336 states have call successors, (551) [2022-12-14 06:14:36,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1911 states to 1911 states and 2478 transitions. [2022-12-14 06:14:36,838 INFO L78 Accepts]: Start accepts. Automaton has 1911 states and 2478 transitions. Word has length 141 [2022-12-14 06:14:36,839 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:36,839 INFO L495 AbstractCegarLoop]: Abstraction has 1911 states and 2478 transitions. [2022-12-14 06:14:36,839 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:36,839 INFO L276 IsEmpty]: Start isEmpty. Operand 1911 states and 2478 transitions. [2022-12-14 06:14:36,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2022-12-14 06:14:36,842 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:36,843 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:36,848 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 06:14:37,043 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 06:14:37,044 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:37,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:37,044 INFO L85 PathProgramCache]: Analyzing trace with hash -203722749, now seen corresponding path program 1 times [2022-12-14 06:14:37,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:37,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1465052209] [2022-12-14 06:14:37,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:37,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:37,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:37,102 INFO L134 CoverageAnalysis]: Checked inductivity of 127 backedges. 45 proven. 12 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-12-14 06:14:37,102 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:37,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1465052209] [2022-12-14 06:14:37,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1465052209] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:37,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [16910388] [2022-12-14 06:14:37,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:37,103 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:37,103 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:37,104 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:37,106 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 06:14:37,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:37,211 INFO L263 TraceCheckSpWp]: Trace formula consists of 574 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:14:37,214 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:37,244 INFO L134 CoverageAnalysis]: Checked inductivity of 127 backedges. 83 proven. 0 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2022-12-14 06:14:37,244 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 06:14:37,244 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [16910388] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:37,244 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 06:14:37,245 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 4 [2022-12-14 06:14:37,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118015451] [2022-12-14 06:14:37,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:37,245 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:14:37,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:37,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:14:37,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:37,246 INFO L87 Difference]: Start difference. First operand 1911 states and 2478 transitions. Second operand has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:37,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:37,509 INFO L93 Difference]: Finished difference Result 5373 states and 7275 transitions. [2022-12-14 06:14:37,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:14:37,510 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) Word has length 141 [2022-12-14 06:14:37,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:37,522 INFO L225 Difference]: With dead ends: 5373 [2022-12-14 06:14:37,522 INFO L226 Difference]: Without dead ends: 3480 [2022-12-14 06:14:37,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:37,528 INFO L413 NwaCegarLoop]: 163 mSDtfsCounter, 72 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:37,529 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 268 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:14:37,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3480 states. [2022-12-14 06:14:37,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3480 to 3460. [2022-12-14 06:14:37,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3460 states, 2322 states have (on average 1.2472006890611542) internal successors, (2896), 2573 states have internal predecessors, (2896), 587 states have call successors, (587), 498 states have call predecessors, (587), 550 states have return successors, (1094), 579 states have call predecessors, (1094), 587 states have call successors, (1094) [2022-12-14 06:14:37,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3460 states to 3460 states and 4577 transitions. [2022-12-14 06:14:37,786 INFO L78 Accepts]: Start accepts. Automaton has 3460 states and 4577 transitions. Word has length 141 [2022-12-14 06:14:37,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:37,786 INFO L495 AbstractCegarLoop]: Abstraction has 3460 states and 4577 transitions. [2022-12-14 06:14:37,786 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.0) internal successors, (84), 3 states have internal predecessors, (84), 3 states have call successors, (22), 3 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:37,786 INFO L276 IsEmpty]: Start isEmpty. Operand 3460 states and 4577 transitions. [2022-12-14 06:14:37,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-12-14 06:14:37,792 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:37,792 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:37,797 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 06:14:37,993 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-14 06:14:37,993 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:37,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:37,994 INFO L85 PathProgramCache]: Analyzing trace with hash 744266048, now seen corresponding path program 1 times [2022-12-14 06:14:37,994 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:37,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841223022] [2022-12-14 06:14:37,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:37,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:38,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:38,132 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 39 proven. 11 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2022-12-14 06:14:38,132 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:38,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841223022] [2022-12-14 06:14:38,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841223022] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:38,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [755882855] [2022-12-14 06:14:38,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:38,133 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:38,133 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:38,135 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:38,137 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 06:14:38,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:38,250 INFO L263 TraceCheckSpWp]: Trace formula consists of 576 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:14:38,254 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:38,311 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-12-14 06:14:38,311 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 06:14:38,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [755882855] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:38,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 06:14:38,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 4 [2022-12-14 06:14:38,312 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1038891168] [2022-12-14 06:14:38,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:38,312 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:14:38,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:38,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:14:38,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:38,313 INFO L87 Difference]: Start difference. First operand 3460 states and 4577 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (20), 3 states have call predecessors, (20), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:38,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:38,627 INFO L93 Difference]: Finished difference Result 5335 states and 6995 transitions. [2022-12-14 06:14:38,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:14:38,627 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (20), 3 states have call predecessors, (20), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) Word has length 143 [2022-12-14 06:14:38,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:38,637 INFO L225 Difference]: With dead ends: 5335 [2022-12-14 06:14:38,637 INFO L226 Difference]: Without dead ends: 3624 [2022-12-14 06:14:38,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 06:14:38,641 INFO L413 NwaCegarLoop]: 202 mSDtfsCounter, 62 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:38,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 304 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:14:38,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3624 states. [2022-12-14 06:14:38,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3624 to 3507. [2022-12-14 06:14:38,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3507 states, 2353 states have (on average 1.246068848278793) internal successors, (2932), 2607 states have internal predecessors, (2932), 595 states have call successors, (595), 514 states have call predecessors, (595), 558 states have return successors, (959), 577 states have call predecessors, (959), 595 states have call successors, (959) [2022-12-14 06:14:38,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3507 states to 3507 states and 4486 transitions. [2022-12-14 06:14:38,902 INFO L78 Accepts]: Start accepts. Automaton has 3507 states and 4486 transitions. Word has length 143 [2022-12-14 06:14:38,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:38,902 INFO L495 AbstractCegarLoop]: Abstraction has 3507 states and 4486 transitions. [2022-12-14 06:14:38,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (20), 3 states have call predecessors, (20), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:38,902 INFO L276 IsEmpty]: Start isEmpty. Operand 3507 states and 4486 transitions. [2022-12-14 06:14:38,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-12-14 06:14:38,908 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:38,908 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:38,913 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 06:14:39,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:39,109 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:39,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:39,109 INFO L85 PathProgramCache]: Analyzing trace with hash -1646129325, now seen corresponding path program 1 times [2022-12-14 06:14:39,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:39,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103194212] [2022-12-14 06:14:39,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:39,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:39,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:39,144 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 35 proven. 7 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2022-12-14 06:14:39,144 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:39,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1103194212] [2022-12-14 06:14:39,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1103194212] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:39,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1861464260] [2022-12-14 06:14:39,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:39,145 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:39,145 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:39,146 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:39,146 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 06:14:39,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:39,225 INFO L263 TraceCheckSpWp]: Trace formula consists of 569 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:14:39,228 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:39,287 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-12-14 06:14:39,287 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 06:14:39,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1861464260] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:39,287 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 06:14:39,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [3] total 3 [2022-12-14 06:14:39,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063710712] [2022-12-14 06:14:39,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:39,288 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:14:39,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:39,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:14:39,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:14:39,289 INFO L87 Difference]: Start difference. First operand 3507 states and 4486 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (21), 3 states have call predecessors, (21), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:39,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:14:39,562 INFO L93 Difference]: Finished difference Result 5155 states and 6508 transitions. [2022-12-14 06:14:39,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:14:39,562 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (21), 3 states have call predecessors, (21), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) Word has length 143 [2022-12-14 06:14:39,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:14:39,573 INFO L225 Difference]: With dead ends: 5155 [2022-12-14 06:14:39,573 INFO L226 Difference]: Without dead ends: 3509 [2022-12-14 06:14:39,577 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:14:39,578 INFO L413 NwaCegarLoop]: 194 mSDtfsCounter, 57 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 06:14:39,578 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 292 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 06:14:39,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3509 states. [2022-12-14 06:14:39,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3509 to 3448. [2022-12-14 06:14:39,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3448 states, 2311 states have (on average 1.2397230636088274) internal successors, (2865), 2563 states have internal predecessors, (2865), 584 states have call successors, (584), 508 states have call predecessors, (584), 552 states have return successors, (843), 566 states have call predecessors, (843), 584 states have call successors, (843) [2022-12-14 06:14:39,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3448 states to 3448 states and 4292 transitions. [2022-12-14 06:14:39,845 INFO L78 Accepts]: Start accepts. Automaton has 3448 states and 4292 transitions. Word has length 143 [2022-12-14 06:14:39,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:14:39,845 INFO L495 AbstractCegarLoop]: Abstraction has 3448 states and 4292 transitions. [2022-12-14 06:14:39,846 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (21), 3 states have call predecessors, (21), 3 states have return successors, (21), 3 states have call predecessors, (21), 3 states have call successors, (21) [2022-12-14 06:14:39,846 INFO L276 IsEmpty]: Start isEmpty. Operand 3448 states and 4292 transitions. [2022-12-14 06:14:39,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2022-12-14 06:14:39,852 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:14:39,852 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:14:39,857 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 06:14:40,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-14 06:14:40,053 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:14:40,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:14:40,053 INFO L85 PathProgramCache]: Analyzing trace with hash 14603296, now seen corresponding path program 1 times [2022-12-14 06:14:40,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:14:40,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239911749] [2022-12-14 06:14:40,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:40,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:14:40,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:40,667 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 20 proven. 49 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-12-14 06:14:40,668 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:14:40,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239911749] [2022-12-14 06:14:40,668 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [239911749] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:14:40,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [617161568] [2022-12-14 06:14:40,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:14:40,668 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:14:40,668 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:14:40,669 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:14:40,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 06:14:40,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:14:40,749 INFO L263 TraceCheckSpWp]: Trace formula consists of 571 conjuncts, 40 conjunts are in the unsatisfiable core [2022-12-14 06:14:40,751 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:14:41,029 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 72 proven. 17 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 06:14:41,029 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:14:41,520 INFO L134 CoverageAnalysis]: Checked inductivity of 125 backedges. 63 proven. 6 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-12-14 06:14:41,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [617161568] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:14:41,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [627110712] [2022-12-14 06:14:41,523 INFO L159 IcfgInterpreter]: Started Sifa with 71 locations of interest [2022-12-14 06:14:41,523 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:14:41,524 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:14:41,524 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:14:41,524 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:14:45,251 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 63 for LOIs [2022-12-14 06:14:45,257 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 65 for LOIs [2022-12-14 06:14:46,053 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__methaneAlarm with input of size 83 for LOIs [2022-12-14 06:14:46,132 INFO L197 IcfgInterpreter]: Interpreting procedure isMethaneAlarm with input of size 83 for LOIs [2022-12-14 06:14:46,141 INFO L197 IcfgInterpreter]: Interpreting procedure isPumpRunning with input of size 74 for LOIs [2022-12-14 06:14:46,148 INFO L197 IcfgInterpreter]: Interpreting procedure select_one with input of size 86 for LOIs [2022-12-14 06:14:46,159 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__before__lowWaterSensor with input of size 81 for LOIs [2022-12-14 06:14:46,370 INFO L197 IcfgInterpreter]: Interpreting procedure activatePump__before__methaneQuery with input of size 85 for LOIs [2022-12-14 06:14:46,378 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:14:57,821 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '69472#(and (<= ~__SELECTED_FEATURE_highWaterSensor~0 2147483647) (= ~__SELECTED_FEATURE_methaneQuery~0 0) (= |timeShift_getWaterLevel_~retValue_acc~1#1| ~waterLevel~0) (= ~head~0.offset 0) (<= 0 (+ ~__SELECTED_FEATURE_methaneAlarm~0 2147483648)) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1| 1) (<= |#NULL.offset| 0) (= 1 ~systemActive~0) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_startCommand~0)) (= |old(~pumpRunning~0)| 0) (<= 0 (+ 2147483648 ~__SELECTED_FEATURE_highWaterSensor~0)) (= |timeShift_getWaterLevel_~retValue_acc~1#1| |timeShift_getWaterLevel_#res#1|) (= ~__GUIDSL_ROOT_PRODUCTION~0 1) (<= ~methaneLevelCritical~0 0) (<= ~__SELECTED_FEATURE_startCommand~0 2147483647) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| |timeShift_getWaterLevel_#res#1|) (<= 0 ~head~0.base) (<= 0 ~methaneLevelCritical~0) (= |old(~waterLevel~0)| ~waterLevel~0) (<= 1 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|) (<= 2 |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| 2)) (<= ~__SELECTED_FEATURE_methaneAlarm~0 2147483647) (<= ~head~0.base 0) (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) (= ~__SELECTED_FEATURE_base~0 1) (<= 0 |#NULL.offset|) (<= 0 (+ ~__SELECTED_FEATURE_stopCommand~0 2147483648)) (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (= ~switchedOnBeforeTS~0 0) (<= 0 |#StackHeapBarrier|) (<= ~__SELECTED_FEATURE_stopCommand~0 2147483647) (<= |timeShift_getWaterLevel_~retValue_acc~1#1| 2147483647) (= ~pumpRunning~0 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-12-14 06:14:57,821 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 06:14:57,821 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:14:57,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 13, 11] total 32 [2022-12-14 06:14:57,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273192882] [2022-12-14 06:14:57,822 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 06:14:57,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 06:14:57,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:57,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 06:14:57,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=851, Invalid=6289, Unknown=0, NotChecked=0, Total=7140 [2022-12-14 06:14:57,824 INFO L87 Difference]: Start difference. First operand 3448 states and 4292 transitions. Second operand has 32 states, 30 states have (on average 6.533333333333333) internal successors, (196), 31 states have internal predecessors, (196), 19 states have call successors, (54), 9 states have call predecessors, (54), 13 states have return successors, (54), 19 states have call predecessors, (54), 18 states have call successors, (54) [2022-12-14 06:15:03,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:15:03,482 INFO L93 Difference]: Finished difference Result 8699 states and 11647 transitions. [2022-12-14 06:15:03,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 99 states. [2022-12-14 06:15:03,482 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 6.533333333333333) internal successors, (196), 31 states have internal predecessors, (196), 19 states have call successors, (54), 9 states have call predecessors, (54), 13 states have return successors, (54), 19 states have call predecessors, (54), 18 states have call successors, (54) Word has length 145 [2022-12-14 06:15:03,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:15:03,484 INFO L225 Difference]: With dead ends: 8699 [2022-12-14 06:15:03,484 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 06:15:03,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 604 GetRequests, 406 SyntacticMatches, 18 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15168 ImplicationChecksByTransitivity, 14.4s TimeCoverageRelationStatistics Valid=3074, Invalid=29868, Unknown=0, NotChecked=0, Total=32942 [2022-12-14 06:15:03,500 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 2914 mSDsluCounter, 1372 mSDsCounter, 0 mSdLazyCounter, 4455 mSolverCounterSat, 2862 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2914 SdHoareTripleChecker+Valid, 1578 SdHoareTripleChecker+Invalid, 7317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2862 IncrementalHoareTripleChecker+Valid, 4455 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 06:15:03,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2914 Valid, 1578 Invalid, 7317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2862 Valid, 4455 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-12-14 06:15:03,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 06:15:03,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 06:15:03,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 06:15:03,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 06:15:03,501 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 145 [2022-12-14 06:15:03,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:15:03,501 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 06:15:03,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 6.533333333333333) internal successors, (196), 31 states have internal predecessors, (196), 19 states have call successors, (54), 9 states have call predecessors, (54), 13 states have return successors, (54), 19 states have call predecessors, (54), 18 states have call successors, (54) [2022-12-14 06:15:03,502 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 06:15:03,502 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 06:15:03,503 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 06:15:03,509 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 06:15:03,704 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 06:15:03,710 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 06:15:19,077 WARN L233 SmtUtils]: Spent 5.03s on a formula simplification. DAG size of input: 356 DAG size of output: 344 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-12-14 06:16:10,340 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 985 992) no Hoare annotation was computed. [2022-12-14 06:16:10,341 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 985 992) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 1))) (and (or .cse0 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse1 .cse2 .cse3 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) .cse4) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0)) .cse4) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 .cse2 .cse3 .cse4))) [2022-12-14 06:16:10,341 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 943 950) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= ~__SELECTED_FEATURE_base~0 1)) (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) (= 0 ~systemActive~0) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) [2022-12-14 06:16:10,341 INFO L899 garLoopResultBuilder]: For program point activatePump__before__methaneQueryEXIT(lines 943 950) no Hoare annotation was computed. [2022-12-14 06:16:10,341 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 1004 1012) no Hoare annotation was computed. [2022-12-14 06:16:10,341 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1004 1012) the Hoare annotation is: true [2022-12-14 06:16:10,341 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 1)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse2 .cse3))) [2022-12-14 06:16:10,341 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (or (<= 2 ~waterLevel~0) (and (<= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0) (< 0 (+ |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 1)))) (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3))) [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L962(line 962) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 1)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse2 .cse3))) [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L834(line 834) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L962-1(lines 951 967) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3) (let ((.cse4 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse4 (= ~pumpRunning~0 1)) .cse2 (and .cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse3)))) [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L834-1(lines 815 839) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse4 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 (and (= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~5#1| 0) .cse2) (not (<= ~waterLevel~0 1)) .cse3 .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse5 .cse3 .cse4 .cse6) (or .cse0 .cse1 .cse5 .cse3 .cse2 .cse4 .cse6))) [2022-12-14 06:16:10,342 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2022-12-14 06:16:10,342 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorFINAL(lines 840 856) no Hoare annotation was computed. [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 1)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse2 .cse3))) [2022-12-14 06:16:10,342 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-12-14 06:16:10,343 INFO L895 garLoopResultBuilder]: At program point L979-1(lines 968 984) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3) (let ((.cse4 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse4 (= ~pumpRunning~0 1)) .cse2 (and .cse4 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) .cse3)))) [2022-12-14 06:16:10,343 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 840 856) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__lowWaterSensorEXIT(lines 840 856) no Hoare annotation was computed. [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point L823(lines 823 831) no Hoare annotation was computed. [2022-12-14 06:16:10,343 INFO L895 garLoopResultBuilder]: At program point L819(lines 819 836) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 982) no Hoare annotation was computed. [2022-12-14 06:16:10,343 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 283) the Hoare annotation is: true [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point select_oneEXIT(lines 274 283) no Hoare annotation was computed. [2022-12-14 06:16:10,343 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 92 103) the Hoare annotation is: true [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 92 103) no Hoare annotation was computed. [2022-12-14 06:16:10,343 INFO L899 garLoopResultBuilder]: For program point L1142(lines 1142 1152) no Hoare annotation was computed. [2022-12-14 06:16:10,344 INFO L895 garLoopResultBuilder]: At program point L915(line 915) the Hoare annotation is: (let ((.cse12 (= ~__SELECTED_FEATURE_methaneAlarm~0 0))) (let ((.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 1)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not .cse12)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0)) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (let ((.cse5 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse5) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse5))) .cse6 .cse7)) (or .cse1 .cse2 .cse3 .cse4 .cse8 .cse9) (or .cse1 .cse2 (and (= ~waterLevel~0 1) .cse6 .cse7) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse0 .cse10 .cse1 .cse4) (or .cse10 .cse1 .cse4 .cse9) (or .cse0 .cse11 .cse1 .cse2 .cse3 .cse8) (or .cse11 .cse10 .cse1 .cse12 .cse13) (or .cse10 .cse1 .cse4 (not .cse3)) (or .cse11 .cse10 .cse1 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse13) (or .cse10 (not (= |old(~waterLevel~0)| 1)) .cse1)))) [2022-12-14 06:16:10,344 INFO L899 garLoopResultBuilder]: For program point L1138(lines 1138 1155) no Hoare annotation was computed. [2022-12-14 06:16:10,344 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 783 805) no Hoare annotation was computed. [2022-12-14 06:16:10,344 INFO L895 garLoopResultBuilder]: At program point L1138-1(lines 1130 1158) the Hoare annotation is: (let ((.cse25 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse21 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~pumpRunning~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse9 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| ~waterLevel~0))) (let ((.cse7 (= ~waterLevel~0 1)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (not (= |old(~waterLevel~0)| 2))) (.cse2 (and .cse5 .cse6 .cse13 .cse8 .cse9)) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse22 (not .cse21)) (.cse15 (not (= |old(~pumpRunning~0)| 1))) (.cse4 (= 0 ~systemActive~0)) (.cse23 (not .cse25)) (.cse14 (= ~pumpRunning~0 1)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse24 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse20 (and .cse5 .cse6 (<= ~waterLevel~0 1) .cse13 .cse8 .cse9)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 (not .cse4)) (or (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (let ((.cse16 (< 0 |old(~waterLevel~0)|))) (let ((.cse12 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse16))) (or .cse10 .cse11 .cse1 (and (<= ~waterLevel~0 0) (or .cse12 .cse13) .cse8 .cse9 .cse14) .cse15 (and .cse6 (or (and (not .cse16) .cse13) .cse12) .cse17 .cse9) .cse4))) (or .cse1 (and (or .cse10 .cse0 .cse18) (or .cse0 .cse18 .cse19)) (= ~switchedOnBeforeTS~0 0)) (or .cse20 .cse0 (and (= 2 ~waterLevel~0) .cse13) .cse1 .cse3 .cse21 .cse19) (or (and .cse7 .cse8 .cse9 .cse14) .cse1 (and .cse6 .cse7 .cse17 .cse9) .cse15 .cse18 .cse4) (or .cse1 .cse22 .cse15 .cse4 .cse3 .cse23 .cse14 .cse24) (or .cse11 .cse0 .cse1 .cse2 .cse25 .cse19) (or .cse10 .cse11 .cse1 .cse22 .cse15 .cse4 .cse23 .cse14) (or .cse0 .cse1 (and .cse6 .cse13 .cse8 .cse9) (and .cse13 .cse9 .cse14) .cse3 .cse24) (or .cse10 .cse11 .cse20 .cse0 .cse1)))) [2022-12-14 06:16:10,344 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse12 (= ~__SELECTED_FEATURE_methaneAlarm~0 0))) (let ((.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 1)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not .cse12)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0)) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (let ((.cse5 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse5) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse5))) .cse6 .cse7)) (or .cse1 .cse2 .cse3 .cse4 .cse8 .cse9) (or .cse1 .cse2 (and (= ~waterLevel~0 1) .cse6 .cse7) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse0 .cse10 .cse1 .cse4) (or .cse10 .cse1 .cse4 .cse9) (or .cse0 .cse11 .cse1 .cse2 .cse3 .cse8) (or .cse11 .cse10 .cse1 .cse12 .cse13) (or .cse10 .cse1 .cse4 (not .cse3)) (or .cse11 .cse10 .cse1 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse13) (or .cse10 (not (= |old(~waterLevel~0)| 1)) .cse1)))) [2022-12-14 06:16:10,344 INFO L895 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: (let ((.cse12 (= ~__SELECTED_FEATURE_methaneAlarm~0 0))) (let ((.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 1)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not .cse12)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0)) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (let ((.cse5 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse5) (= |old(~waterLevel~0)| ~waterLevel~0)) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse5))) .cse6 .cse7)) (or .cse1 .cse2 .cse3 .cse4 .cse8 .cse9) (or .cse1 .cse2 (and (= ~waterLevel~0 1) .cse6 .cse7) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse0 .cse10 .cse1 .cse4) (or .cse10 .cse1 .cse4 .cse9) (or .cse0 .cse11 .cse1 .cse2 .cse3 .cse8) (or .cse11 .cse10 .cse1 .cse12 .cse13) (or .cse10 .cse1 .cse4 (not .cse3)) (or .cse11 .cse10 .cse1 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse13) (or .cse10 (not (= |old(~waterLevel~0)| 1)) .cse1)))) [2022-12-14 06:16:10,345 INFO L899 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2022-12-14 06:16:10,345 INFO L895 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse14 (= ~__SELECTED_FEATURE_methaneAlarm~0 0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (not .cse14))) (let ((.cse4 (and .cse5 .cse13 .cse6 .cse7)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse5 (= ~waterLevel~0 1) .cse6 .cse7)) (or .cse2 .cse3 .cse8 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse9 .cse4) (or .cse3 .cse10 .cse11 .cse8 .cse12) (or .cse1 .cse2 .cse3 (and .cse5 .cse13 .cse6) .cse14 .cse9) (or .cse2 .cse3 .cse8 (and .cse13 .cse6 .cse7 (= ~switchedOnBeforeTS~0 0)) .cse12) (or .cse2 .cse3 .cse8 (not .cse11)) (or .cse0 .cse1 .cse3 .cse10 .cse11))))) [2022-12-14 06:16:10,345 INFO L895 garLoopResultBuilder]: At program point L920-1(lines 901 925) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0)) (.cse20 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse13 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0))) (let ((.cse17 (not .cse13)) (.cse4 (not .cse20)) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse30 (<= 2 ~waterLevel~0)) (.cse29 (= |old(~pumpRunning~0)| 0)) (.cse24 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse28 (= ~__SELECTED_FEATURE_base~0 1)) (.cse27 (not .cse9)) (.cse14 (= ~pumpRunning~0 1))) (let ((.cse6 (= ~waterLevel~0 1)) (.cse18 (and .cse30 .cse29 .cse24 .cse13 .cse28 .cse27 .cse14)) (.cse19 (and .cse5 .cse24 .cse7 .cse27)) (.cse16 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse22 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (and .cse5 .cse29 .cse24 .cse28 .cse7 .cse4)) (.cse12 (and .cse17 .cse30 .cse29 (<= ~waterLevel~0 2) .cse24 .cse28 .cse4 .cse14)) (.cse21 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse29)) (.cse2 (not .cse28)) (.cse26 (= ~switchedOnBeforeTS~0 0)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse5 .cse6 .cse7 .cse4)) (or .cse2 .cse8 .cse9 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse11 .cse2 .cse12 .cse3 .cse13) (or .cse2 .cse8 (and .cse6 .cse7 .cse14) .cse15 .cse9 (and .cse5 .cse6 .cse16)) (or .cse0 .cse1 .cse2 .cse17 .cse18 .cse3 .cse19) (or .cse1 .cse2 .cse9 .cse3 .cse4 .cse10) (or .cse1 .cse2 .cse17 .cse18 .cse20 .cse3 .cse21 .cse19) (let ((.cse25 (< 0 |old(~waterLevel~0)|))) (let ((.cse23 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse25))) (or .cse0 .cse22 .cse2 .cse8 .cse9 (and (<= ~waterLevel~0 0) (or .cse23 .cse24) .cse7 .cse14) (and .cse5 (or (and (not .cse25) .cse24) .cse23) .cse16)))) (or .cse2 (and (or .cse0 .cse1 .cse15) (or .cse1 .cse15 .cse21)) .cse26) (or .cse0 .cse22 .cse2 .cse8 .cse9 .cse4) (or .cse1 .cse2 .cse3 .cse27) (or .cse1 .cse11 .cse2 .cse12 .cse3 .cse13 .cse21) (or .cse1 .cse2 (and .cse24 .cse7 .cse26) .cse9 .cse3 (and .cse24 .cse14) .cse10))))) [2022-12-14 06:16:10,345 INFO L899 garLoopResultBuilder]: For program point L1143(lines 1143 1149) no Hoare annotation was computed. [2022-12-14 06:16:10,345 INFO L895 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse17 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse19 (= ~__SELECTED_FEATURE_base~0 1)) (.cse7 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse18 (not .cse3))) (let ((.cse8 (= ~pumpRunning~0 1)) (.cse14 (not (= |old(~waterLevel~0)| 2))) (.cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse17 (<= ~waterLevel~0 1) .cse6 .cse19 .cse7 .cse18)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse19)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse16 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (let ((.cse5 (< 0 |old(~waterLevel~0)|))) (or (and (not .cse5) .cse6) (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse5))) .cse7 .cse8)) (or .cse9 .cse10 .cse1 .cse11 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse12) (or .cse1 .cse2 (and .cse13 .cse7 .cse8) .cse14 .cse3) (or .cse1 .cse2 .cse15 .cse14 .cse3) (or .cse0 .cse9 .cse10 .cse1 .cse11) (or .cse10 .cse1 .cse15 .cse4 .cse16) (or .cse0 .cse9 .cse1 .cse2 .cse15 .cse3) (or .cse10 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse17 .cse15 .cse13 .cse7)) (or .cse0 .cse10 .cse1 .cse15 .cse4) (or .cse9 .cse10 .cse1 .cse15 .cse12) (or .cse10 .cse1 .cse4 .cse18) (or .cse10 .cse1 (and .cse6 .cse7 (= ~switchedOnBeforeTS~0 0)) .cse4 .cse16))))) [2022-12-14 06:16:10,346 INFO L895 garLoopResultBuilder]: At program point L937-1(lines 926 942) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse21 (not .cse9)) (.cse22 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse11 (= ~waterLevel~0 1)) (.cse5 (= ~pumpRunning~0 1)) (.cse24 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse10 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse10 .cse4 .cse14)) (.cse13 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse15 (not (= |old(~waterLevel~0)| 1))) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (not .cse24)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (and .cse11 .cse14 .cse5)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse19 (not .cse22)) (.cse16 (and (<= 2 ~waterLevel~0) .cse4)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (and .cse10 .cse4 .cse14 .cse21))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse6 .cse7 .cse8 .cse9 (and .cse10 .cse11 .cse12)) (or .cse13 (and .cse4 .cse14 .cse5) .cse1 .cse6 (and .cse10 .cse4 .cse12) .cse9 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse15 .cse1 (and .cse10 .cse11 .cse14)) (or .cse13 .cse0 .cse1 .cse2 .cse16 .cse3) (or .cse1 (and (or .cse13 .cse0 .cse8) (or .cse0 .cse8 .cse17)) (= ~switchedOnBeforeTS~0 0)) (or .cse13 .cse1 .cse18 .cse6 .cse9 .cse3 .cse19 .cse5) (let ((.cse20 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse13 .cse15 .cse1 (and .cse10 .cse20 .cse12) .cse6 .cse9 (and .cse20 .cse14 .cse5))) (or .cse0 .cse1 .cse3 .cse21) (or .cse1 .cse18 .cse6 .cse7 .cse8 .cse9 .cse19) (or .cse0 .cse1 .cse22 .cse16 .cse3 .cse17 .cse23) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse24 .cse17 .cse23))))) [2022-12-14 06:16:10,346 INFO L895 garLoopResultBuilder]: At program point L322(line 322) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse3) (or .cse6 .cse0 .cse3 .cse4) (or .cse7 .cse6 .cse0 (= ~__SELECTED_FEATURE_methaneAlarm~0 0) .cse8) (or .cse6 .cse0 .cse3 (not .cse2)) (or .cse7 .cse6 .cse0 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse8) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse5 .cse7 .cse0 .cse1 .cse2))) [2022-12-14 06:16:10,346 INFO L895 garLoopResultBuilder]: At program point L1140(line 1140) the Hoare annotation is: (let ((.cse24 (= |old(~pumpRunning~0)| 0)) (.cse23 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse17 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~11#1| ~waterLevel~0))) (let ((.cse7 (and .cse0 .cse11 .cse2 .cse3)) (.cse1 (= ~waterLevel~0 1)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (not (= |old(~waterLevel~0)| 2))) (.cse16 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse19 (not .cse17)) (.cse13 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (= 0 ~systemActive~0)) (.cse21 (not .cse23)) (.cse12 (= ~pumpRunning~0 1)) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not .cse24)) (.cse5 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse22 (and .cse0 (<= ~waterLevel~0 1) .cse24 .cse11 .cse2 .cse3)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5) (or .cse6 .cse4 .cse5 .cse7 (not .cse8)) (let ((.cse14 (< 0 |old(~waterLevel~0)|))) (let ((.cse10 (and (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse14))) (or .cse9 .cse6 .cse5 (and (<= ~waterLevel~0 0) (or .cse10 .cse11) .cse2 .cse3 .cse12) .cse13 (and .cse0 (or (and (not .cse14) .cse11) .cse10) .cse15 .cse3) .cse8))) (or .cse4 .cse5 .cse7 .cse16 .cse17 .cse18) (or .cse5 .cse19 .cse13 .cse20 .cse8 .cse21 .cse12) (or .cse4 .cse5 .cse16 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse1 .cse2 .cse3 .cse12) .cse5 (and .cse0 .cse1 .cse15 .cse3) .cse13 .cse20 .cse8) (or .cse9 .cse4 .cse5 .cse16 .cse22) (or .cse9 .cse6 .cse5 .cse19 .cse13 .cse8 .cse21 .cse12) (or .cse6 .cse4 .cse5 .cse23 .cse22 .cse18)))) [2022-12-14 06:16:10,346 INFO L899 garLoopResultBuilder]: For program point L1140-1(line 1140) no Hoare annotation was computed. [2022-12-14 06:16:10,346 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 917) no Hoare annotation was computed. [2022-12-14 06:16:10,346 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 780 806) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse2 (and .cse7 .cse8 .cse14)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (not (= |old(~waterLevel~0)| 2))) (.cse12 (and .cse8 (= ~pumpRunning~0 1))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and .cse7 .cse8)) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse5) (or .cse6 .cse0 .cse1 (and .cse7 .cse8 .cse9) .cse4) (or .cse6 .cse10 .cse1 .cse11 .cse3 .cse12) (or .cse6 .cse1 .cse11 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse13 .cse3 .cse14 .cse9 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse7 (= ~waterLevel~0 1))) (or .cse0 .cse1 (= ~__SELECTED_FEATURE_methaneAlarm~0 0) .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse11 .cse13 .cse3 .cse12) (or .cse0 .cse15 .cse1 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse10 .cse0 .cse15 .cse1 (not .cse3))))) [2022-12-14 06:16:10,347 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 922) no Hoare annotation was computed. [2022-12-14 06:16:10,347 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 940) no Hoare annotation was computed. [2022-12-14 06:16:10,347 INFO L895 garLoopResultBuilder]: At program point L794-1(lines 794 800) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse16 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse11 (= ~waterLevel~0 1)) (.cse14 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 1)) (.cse22 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse17 (and (<= 2 ~waterLevel~0) .cse4)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse15 (not (= |old(~waterLevel~0)| 1))) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (not .cse22)) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse7 (and .cse11 .cse14 .cse5)) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse9 (= 0 ~systemActive~0)) (.cse20 (not .cse16)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse2 (and .cse10 .cse4 .cse14)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse6 .cse7 .cse8 .cse9 (and .cse10 .cse11 .cse12)) (or .cse13 (and .cse4 .cse14 .cse5) .cse1 .cse6 (and .cse10 .cse4 .cse12) .cse9 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse15 .cse1 (and .cse10 .cse11 .cse14)) (or .cse0 .cse1 .cse2 .cse3 (not .cse9)) (or .cse0 .cse1 .cse2 .cse16 .cse17 .cse3 .cse18) (or .cse13 .cse0 .cse1 .cse2 .cse17 .cse3) (or .cse1 (and (or .cse13 .cse0 .cse8) (or .cse0 .cse8 .cse18)) (= ~switchedOnBeforeTS~0 0)) (or .cse13 .cse1 .cse19 .cse6 .cse9 .cse3 .cse20 .cse5) (let ((.cse21 (= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse13 .cse15 .cse1 (and .cse10 .cse21 .cse12) .cse6 .cse9 (and .cse21 .cse14 .cse5))) (or .cse1 .cse19 .cse6 .cse7 .cse8 .cse9 .cse20) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse22 .cse18)))) [2022-12-14 06:16:10,347 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 780 806) no Hoare annotation was computed. [2022-12-14 06:16:10,347 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 322) no Hoare annotation was computed. [2022-12-14 06:16:10,347 INFO L895 garLoopResultBuilder]: At program point L1125(line 1125) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse2 (and .cse7 .cse8 .cse14)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (= |old(~pumpRunning~0)| 1))) (.cse13 (not (= |old(~waterLevel~0)| 2))) (.cse12 (and .cse8 (= ~pumpRunning~0 1))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and .cse7 .cse8)) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse5) (or .cse6 .cse0 .cse1 (and .cse7 .cse8 .cse9) .cse4) (or .cse6 .cse10 .cse1 .cse11 .cse3 .cse12) (or .cse6 .cse1 .cse11 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse13 .cse3 .cse14 .cse9 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse7 (= ~waterLevel~0 1))) (or .cse0 .cse1 (= ~__SELECTED_FEATURE_methaneAlarm~0 0) .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse11 .cse13 .cse3 .cse12) (or .cse0 .cse15 .cse1 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse10 .cse0 .cse15 .cse1 (not .cse3))))) [2022-12-14 06:16:10,348 INFO L895 garLoopResultBuilder]: At program point L1125-1(line 1125) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~waterLevel~0 1))) (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__2_#t~ret59#1|)) (.cse18 (or .cse16 .cse5)) (.cse19 (not .cse8))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse12 (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) (.cse10 (and .cse17 .cse3 .cse4 .cse16 .cse18 .cse19)) (.cse14 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~switchedOnBeforeTS~0)| |old(~pumpRunning~0)|))) (.cse15 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse20 (and .cse4 .cse16 (= ~pumpRunning~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse6 .cse1 .cse2 .cse7 .cse8 .cse9) (or .cse6 .cse10 .cse11 .cse0 .cse2 .cse8) (or .cse10 .cse11 .cse0 .cse2 .cse12 .cse8 .cse13) (or .cse6 .cse2 (not .cse14) .cse7 .cse8 .cse15 .cse9 (not .cse12)) (or .cse10 .cse0 .cse2 .cse8 .cse15 .cse14 .cse13) (or .cse0 (and .cse3 .cse4 .cse16) .cse2 .cse15 (not (<= 2 |old(~waterLevel~0)|))) (or .cse11 .cse0 (and .cse17 .cse3 .cse4 .cse16 .cse18) .cse2 .cse19) (or .cse6 .cse2 .cse20 .cse7 .cse8 .cse15) (or .cse2 .cse20 .cse7 (not (= |old(~waterLevel~0)| 2)) .cse8))))) [2022-12-14 06:16:10,348 INFO L899 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2022-12-14 06:16:10,348 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 171 200) no Hoare annotation was computed. [2022-12-14 06:16:10,348 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 189) no Hoare annotation was computed. [2022-12-14 06:16:10,348 INFO L902 garLoopResultBuilder]: At program point L185-1(lines 185 189) the Hoare annotation is: true [2022-12-14 06:16:10,348 INFO L902 garLoopResultBuilder]: At program point L181-2(lines 181 195) the Hoare annotation is: true [2022-12-14 06:16:10,348 INFO L902 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: true [2022-12-14 06:16:10,348 INFO L899 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2022-12-14 06:16:10,348 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 171 200) the Hoare annotation is: true [2022-12-14 06:16:10,348 INFO L902 garLoopResultBuilder]: At program point L196(lines 171 200) the Hoare annotation is: true [2022-12-14 06:16:10,349 INFO L902 garLoopResultBuilder]: At program point processEnvironment__before__highWaterSensorFINAL(lines 807 813) the Hoare annotation is: true [2022-12-14 06:16:10,349 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__highWaterSensorEXIT(lines 807 813) no Hoare annotation was computed. [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L1093(line 1093) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~__SELECTED_FEATURE_base~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0) .cse2 .cse3 .cse4) (and .cse0 (<= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) .cse1 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse2 .cse3 .cse4))) [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,349 INFO L899 garLoopResultBuilder]: For program point L292-1(line 292) no Hoare annotation was computed. [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L259(lines 259 266) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,349 INFO L902 garLoopResultBuilder]: At program point L259-2(lines 259 266) the Hoare annotation is: true [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L763(lines 704 764) the Hoare annotation is: false [2022-12-14 06:16:10,349 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 757) no Hoare annotation was computed. [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L747-1(lines 735 758) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse3 (not .cse10)) (.cse4 (= ~pumpRunning~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~__SELECTED_FEATURE_base~0 1))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse6 .cse7 .cse2 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0))) (and .cse0 .cse8 .cse1 .cse2 .cse9 .cse3 .cse4) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse6 .cse2) (and .cse5 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse0 .cse1 .cse6 .cse7 .cse2) (and .cse5 .cse0 .cse1 .cse6 .cse10 .cse2) (and .cse5 .cse0 .cse8 .cse1 .cse2 .cse9) (and .cse5 .cse0 .cse1 (= ~waterLevel~0 1) .cse2)))) [2022-12-14 06:16:10,349 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,349 INFO L899 garLoopResultBuilder]: For program point L293-1(line 293) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L706(lines 705 762) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 754) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 06:16:10,350 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L294-1(line 294) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L895 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,350 INFO L895 garLoopResultBuilder]: At program point L295-1(line 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,350 INFO L902 garLoopResultBuilder]: At program point L766(lines 695 770) the Hoare annotation is: true [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L895 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 1)) (.cse2 (= ~waterLevel~0 1)) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse8 (<= ~waterLevel~0 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~__SELECTED_FEATURE_base~0 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (or (and .cse1 .cse2 .cse3 .cse4 .cse5) (and (= 2 ~waterLevel~0) .cse1 .cse4 .cse5)) .cse6) (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse6 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse8 .cse1 .cse9 .cse6 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) .cse4) (and .cse0 (or (and .cse7 .cse1 .cse2) (and .cse7 (<= 2 ~waterLevel~0) .cse1 (<= ~waterLevel~0 2))) .cse6) (and .cse7 .cse0 .cse8 .cse1 .cse6 .cse3) (and .cse7 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse0 .cse8 .cse1 .cse9 .cse6 .cse4))) [2022-12-14 06:16:10,350 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 06:16:10,350 INFO L895 garLoopResultBuilder]: At program point L735(lines 735 758) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~__SELECTED_FEATURE_base~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse0 .cse1 .cse6 .cse7 .cse2 .cse3) (and .cse0 .cse8 .cse1 .cse2 .cse9 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse6 .cse7 .cse2 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) .cse3) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse6 .cse2) (and .cse5 .cse0 .cse8 .cse1 .cse2 .cse9) (and .cse5 .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3))) [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L760(lines 705 762) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 1)) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse9 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~__SELECTED_FEATURE_base~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse5)) .cse6 .cse7) (and .cse1 .cse6 .cse2 .cse7 .cse5 .cse8) (and .cse6 .cse9 .cse2 .cse7 .cse3 .cse5 .cse8) (and .cse0 .cse6 .cse9 .cse2 .cse4 .cse7 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) .cse5) (and .cse0 .cse6 .cse9 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse2 (= ~waterLevel~0 1) .cse7 .cse5) (and .cse0 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse6 .cse9 .cse2 .cse4 .cse7 .cse5))) [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~__SELECTED_FEATURE_base~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse0 .cse1 .cse6 .cse7 .cse2 .cse3) (and .cse0 .cse8 .cse1 .cse2 .cse9 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse6 .cse7 .cse2 (not (= ~__SELECTED_FEATURE_methaneAlarm~0 0)) .cse3) (and .cse5 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse6 .cse2) (and .cse5 .cse0 .cse8 .cse1 .cse2 .cse9) (and .cse5 .cse0 .cse1 (= ~waterLevel~0 1) .cse2 .cse3))) [2022-12-14 06:16:10,351 INFO L899 garLoopResultBuilder]: For program point L1091(lines 1091 1097) no Hoare annotation was computed. [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L290(line 290) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L1091-1(lines 1091 1097) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= ~__SELECTED_FEATURE_base~0 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (<= ~waterLevel~0 2) .cse3) (and (or (and .cse0 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (and .cse0 .cse2 (not (= 0 ~systemActive~0)))) .cse1 (<= ~waterLevel~0 1) .cse3))) [2022-12-14 06:16:10,351 INFO L899 garLoopResultBuilder]: For program point L290-1(line 290) no Hoare annotation was computed. [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~__SELECTED_FEATURE_methaneAlarm~0 0) (= ~waterLevel~0 1) (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) (= ~__SELECTED_FEATURE_base~0 1) (= ~pumpRunning~0 ~switchedOnBeforeTS~0) (not (= 0 ~systemActive~0))) [2022-12-14 06:16:10,351 INFO L899 garLoopResultBuilder]: For program point L291-1(line 291) no Hoare annotation was computed. [2022-12-14 06:16:10,351 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 80 91) no Hoare annotation was computed. [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 80 91) the Hoare annotation is: (let ((.cse7 (not (= ~pumpRunning~0 ~switchedOnBeforeTS~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse6 (not (= ~pumpRunning~0 1))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0) .cse5) (or .cse0 .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse2 (and (or .cse1 .cse8 .cse9) (or .cse1 (not (= |old(~waterLevel~0)| 1)))) .cse3) (or .cse0 .cse1 .cse2 .cse7 .cse3) (or .cse0 .cse1 .cse2 (= ~__SELECTED_FEATURE_methaneAlarm~0 0) .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse3 .cse4 .cse8 .cse9))) [2022-12-14 06:16:10,351 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) (.cse5 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse5) (or .cse1 .cse6 .cse2 .cse3 .cse5 (= ~pumpRunning~0 1)) (or .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-12-14 06:16:10,351 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmEXIT(lines 883 899) no Hoare annotation was computed. [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 883 899) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse3) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)))) [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point L872(line 872) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (or .cse0 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse4 .cse1 .cse2 .cse3))) [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point L868(line 868) the Hoare annotation is: (let ((.cse0 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (or .cse0 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse4 .cse1 .cse2 .cse3))) [2022-12-14 06:16:10,352 INFO L899 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2022-12-14 06:16:10,352 INFO L899 garLoopResultBuilder]: For program point processEnvironment__before__methaneAlarmFINAL(lines 883 899) no Hoare annotation was computed. [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point L862(lines 862 879) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse6 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse4) (or .cse1 .cse5 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (or .cse0 .cse1 .cse6 .cse2 .cse3 .cse4) (or .cse1 .cse6 .cse5 .cse2 .cse3 .cse4))) [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point L877(line 877) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0) .cse4) (or .cse0 .cse1 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0)) .cse2 .cse3 .cse4) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse3 .cse4))) [2022-12-14 06:16:10,352 INFO L895 garLoopResultBuilder]: At program point L877-1(lines 858 882) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 1)) (.cse1 (not (= ~__SELECTED_FEATURE_base~0 1))) (.cse8 (not (= ~__SELECTED_FEATURE_lowWaterSensor~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~switchedOnBeforeTS~0 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 1)) .cse2 .cse3 .cse4) (or (= ~pumpRunning~0 0) .cse1 .cse5 .cse6 .cse2 .cse4 .cse7) (or .cse0 .cse1 .cse8 .cse6 .cse2 .cse4) (or .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse7) (or .cse1 .cse8 .cse5 .cse6 .cse2 .cse4))) [2022-12-14 06:16:10,352 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 993 1003) no Hoare annotation was computed. [2022-12-14 06:16:10,352 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 993 1003) the Hoare annotation is: true [2022-12-14 06:16:10,354 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:16:10,356 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 06:16:10,392 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 06:16:10 BoogieIcfgContainer [2022-12-14 06:16:10,392 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 06:16:10,393 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 06:16:10,393 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 06:16:10,393 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 06:16:10,393 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:13:55" (3/4) ... [2022-12-14 06:16:10,396 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure activatePump__before__methaneQuery [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__lowWaterSensor [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure select_one [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 06:16:10,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__highWaterSensor [2022-12-14 06:16:10,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-14 06:16:10,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__before__methaneAlarm [2022-12-14 06:16:10,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-12-14 06:16:10,406 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-12-14 06:16:10,406 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 14 nodes and edges [2022-12-14 06:16:10,406 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-12-14 06:16:10,406 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:16:10,407 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:16:10,425 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && waterLevel == 1)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive)) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive)) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == switchedOnBeforeTS) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(__SELECTED_FEATURE_base == 1)) || !(0 == systemActive))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(__SELECTED_FEATURE_base == 1) || ((pumpRunning == aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-12-14 06:16:10,425 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || __SELECTED_FEATURE_methaneAlarm == 0) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((\old(waterLevel) == waterLevel + 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1))) && ((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS))) [2022-12-14 06:16:10,425 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || ((((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || 0 == systemActive)) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) && pumpRunning == 1) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((\old(waterLevel) == waterLevel + 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive))) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0)))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == 0 && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0))) || !(__SELECTED_FEATURE_base == 1)) || (((((((!(__SELECTED_FEATURE_lowWaterSensor == 0) && 2 <= waterLevel) && \old(pumpRunning) == 0) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0)) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || ((((((2 <= waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_lowWaterSensor == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || ((((((2 <= waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_lowWaterSensor == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || ((pumpRunning == 0 && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && 1 <= switchedOnBeforeTS))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0))) || !(__SELECTED_FEATURE_base == 1)) || (((((((!(__SELECTED_FEATURE_lowWaterSensor == 0) && 2 <= waterLevel) && \old(pumpRunning) == 0) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && switchedOnBeforeTS == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning)))) && (((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((pumpRunning == 0 || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning)))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || (tmp == 0 && pumpRunning == switchedOnBeforeTS)) || !(waterLevel <= 1)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1) [2022-12-14 06:16:10,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1) [2022-12-14 06:16:10,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || (2 <= waterLevel && pumpRunning == 1)) || 0 == systemActive) || (2 <= waterLevel && pumpRunning == switchedOnBeforeTS)) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-12-14 06:16:10,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || (2 <= waterLevel && pumpRunning == 1)) || 0 == systemActive) || (2 <= waterLevel && pumpRunning == switchedOnBeforeTS)) || !(switchedOnBeforeTS == \old(pumpRunning))) [2022-12-14 06:16:10,447 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 06:16:10,447 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 06:16:10,448 INFO L158 Benchmark]: Toolchain (without parser) took 135912.82ms. Allocated memory was 151.0MB in the beginning and 960.5MB in the end (delta: 809.5MB). Free memory was 115.6MB in the beginning and 430.5MB in the end (delta: -314.9MB). Peak memory consumption was 497.7MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,448 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 109.1MB. Free memory is still 82.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 06:16:10,448 INFO L158 Benchmark]: CACSL2BoogieTranslator took 298.13ms. Allocated memory is still 151.0MB. Free memory was 115.6MB in the beginning and 95.7MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,448 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.69ms. Allocated memory is still 151.0MB. Free memory was 95.2MB in the beginning and 92.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,448 INFO L158 Benchmark]: Boogie Preprocessor took 21.66ms. Allocated memory is still 151.0MB. Free memory was 92.6MB in the beginning and 91.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,448 INFO L158 Benchmark]: RCFGBuilder took 470.62ms. Allocated memory is still 151.0MB. Free memory was 91.0MB in the beginning and 116.8MB in the end (delta: -25.8MB). Peak memory consumption was 33.7MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,449 INFO L158 Benchmark]: TraceAbstraction took 135028.94ms. Allocated memory was 151.0MB in the beginning and 960.5MB in the end (delta: 809.5MB). Free memory was 116.0MB in the beginning and 438.9MB in the end (delta: -322.8MB). Peak memory consumption was 631.9MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,449 INFO L158 Benchmark]: Witness Printer took 54.39ms. Allocated memory is still 960.5MB. Free memory was 438.9MB in the beginning and 430.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-12-14 06:16:10,450 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 109.1MB. Free memory is still 82.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 298.13ms. Allocated memory is still 151.0MB. Free memory was 115.6MB in the beginning and 95.7MB in the end (delta: 19.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.69ms. Allocated memory is still 151.0MB. Free memory was 95.2MB in the beginning and 92.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 21.66ms. Allocated memory is still 151.0MB. Free memory was 92.6MB in the beginning and 91.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 470.62ms. Allocated memory is still 151.0MB. Free memory was 91.0MB in the beginning and 116.8MB in the end (delta: -25.8MB). Peak memory consumption was 33.7MB. Max. memory is 16.1GB. * TraceAbstraction took 135028.94ms. Allocated memory was 151.0MB in the beginning and 960.5MB in the end (delta: 809.5MB). Free memory was 116.0MB in the beginning and 438.9MB in the end (delta: -322.8MB). Peak memory consumption was 631.9MB. Max. memory is 16.1GB. * Witness Printer took 54.39ms. Allocated memory is still 960.5MB. Free memory was 438.9MB in the beginning and 430.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 322]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 13 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 135.0s, OverallIterations: 14, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 12.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 66.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5796 SdHoareTripleChecker+Valid, 5.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5754 mSDsluCounter, 9021 SdHoareTripleChecker+Invalid, 4.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6570 mSDsCounter, 4739 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 11106 IncrementalHoareTripleChecker+Invalid, 15845 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4739 mSolverCounterUnsat, 2451 mSDtfsCounter, 11106 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2305 GetRequests, 1803 SyntacticMatches, 36 SemanticMatches, 466 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27714 ImplicationChecksByTransitivity, 37.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=3507occurred in iteration=12, InterpolantAutomatonStates: 270, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.3s AutomataMinimizationTime, 14 MinimizatonAttempts, 1029 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 64 LocationsWithAnnotation, 13819 PreInvPairs, 16620 NumberOfFragments, 6926 HoareAnnotationTreeSize, 13819 FomulaSimplifications, 171487 FormulaSimplificationTreeSizeReduction, 20.7s HoareSimplificationTime, 64 FomulaSimplificationsInter, 609997 FormulaSimplificationTreeSizeReductionInter, 45.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.7s InterpolantComputationTime, 2563 NumberOfCodeBlocks, 2490 NumberOfCodeBlocksAsserted, 23 NumberOfCheckSat, 2938 ConstructedInterpolants, 0 QuantifiedInterpolants, 6849 SizeOfPredicates, 34 NumberOfNonLiveVariables, 4211 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 25 InterpolantComputations, 11 PerfectInterpolantSequences, 2269/2459 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: ((((((((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && tmp == 1) && waterLevel == 1) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive) - InvariantResult [Line: 951]: Loop Invariant Derived loop invariant: ((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || (2 <= waterLevel && pumpRunning == 1)) || 0 == systemActive) || (2 <= waterLevel && pumpRunning == switchedOnBeforeTS)) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 993]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning)))) && (((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && pumpRunning == switchedOnBeforeTS) || ((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) && tmp == 1) && __SELECTED_FEATURE_base == 1) || (((((2 == waterLevel && tmp == 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((tmp == 1 && waterLevel <= 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && !(0 == systemActive))) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && !(__SELECTED_FEATURE_lowWaterSensor == 0)) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1130]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || ((((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || 0 == systemActive)) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel) && pumpRunning == 1) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1091]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && __SELECTED_FEATURE_base == 1) || ((((((pumpRunning == 0 && splverifierCounter == 0) && pumpRunning == switchedOnBeforeTS) || ((pumpRunning == 0 && splverifierCounter == 0) && !(0 == systemActive))) && tmp == 1) && waterLevel <= 1) && __SELECTED_FEATURE_base == 1) - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: (((((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || __SELECTED_FEATURE_methaneAlarm == 0) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((\old(waterLevel) == waterLevel + 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1))) && ((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: ((((((((((2 == waterLevel && tmp == 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1) || (((((((pumpRunning == 0 && !(__SELECTED_FEATURE_lowWaterSensor == 0)) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive))) || ((((((tmp == 1 && waterLevel <= 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && !(0 == systemActive))) || (((((pumpRunning == 0 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && __SELECTED_FEATURE_base == 1)) || (((((pumpRunning == 0 && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS)) || (((((pumpRunning == 0 && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((((((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || pumpRunning == 1)) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || ((\old(waterLevel) == waterLevel + 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive))) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: ((((((((((((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || (((pumpRunning == 0 && waterLevel == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0)))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == 0 && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0))) || !(__SELECTED_FEATURE_base == 1)) || (((((((!(__SELECTED_FEATURE_lowWaterSensor == 0) && 2 <= waterLevel) && \old(pumpRunning) == 0) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0)) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || ((waterLevel == 1 && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || ((((((2 <= waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_lowWaterSensor == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(__SELECTED_FEATURE_methaneAlarm == 0)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || ((((((2 <= waterLevel && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_lowWaterSensor == 0) && __SELECTED_FEATURE_base == 1) && !(0 == systemActive)) && pumpRunning == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive)))) && ((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || (((waterLevel <= 0 && ((\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)) || \old(waterLevel) == waterLevel)) && pumpRunning == switchedOnBeforeTS) && pumpRunning == 1)) || ((pumpRunning == 0 && ((!(0 < \old(waterLevel)) && \old(waterLevel) == waterLevel) || (\old(waterLevel) == waterLevel + 1 && 0 < \old(waterLevel)))) && 1 <= switchedOnBeforeTS))) && ((!(__SELECTED_FEATURE_base == 1) || (((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || !(1 <= \old(switchedOnBeforeTS))))) || switchedOnBeforeTS == 0)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) <= 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && \old(pumpRunning) == 0) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(__SELECTED_FEATURE_methaneAlarm == 0))) || !(__SELECTED_FEATURE_base == 1)) || (((((((!(__SELECTED_FEATURE_lowWaterSensor == 0) && 2 <= waterLevel) && \old(pumpRunning) == 0) && waterLevel <= 2) && \old(waterLevel) == waterLevel) && __SELECTED_FEATURE_base == 1) && !(__SELECTED_FEATURE_methaneAlarm == 0)) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || ((\old(waterLevel) == waterLevel && pumpRunning == switchedOnBeforeTS) && switchedOnBeforeTS == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 819]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 1)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((pumpRunning == 0 || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning)))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && (((((!(__SELECTED_FEATURE_base == 1) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 1125]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && waterLevel == 1)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS)) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive))) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive)) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive)) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || __SELECTED_FEATURE_methaneAlarm == 0) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || !(__SELECTED_FEATURE_lowWaterSensor == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || pumpRunning == switchedOnBeforeTS) || !(__SELECTED_FEATURE_methaneAlarm == 0))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1)) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(__SELECTED_FEATURE_base == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || __SELECTED_FEATURE_lowWaterSensor == 0) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel)) || !(__SELECTED_FEATURE_base == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && pumpRunning == aux-isPumpRunning()-aux) && \old(waterLevel) == waterLevel) && (\old(waterLevel) == waterLevel || waterLevel == 1))) || !(__SELECTED_FEATURE_base == 1)) || !(0 == systemActive))) && (((((!(\old(switchedOnBeforeTS) == \old(pumpRunning)) || !(__SELECTED_FEATURE_base == 1)) || ((pumpRunning == aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(__SELECTED_FEATURE_base == 1) || ((pumpRunning == aux-isPumpRunning()-aux && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || (tmp == 0 && pumpRunning == switchedOnBeforeTS)) || !(waterLevel <= 1)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && (((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1)) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || pumpRunning == switchedOnBeforeTS) || !(switchedOnBeforeTS == \old(pumpRunning))) || pumpRunning == 1) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: ((((!(__SELECTED_FEATURE_base == 1) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 2)) || 0 == systemActive) || !(switchedOnBeforeTS == \old(pumpRunning))) && ((((((!(\old(pumpRunning) == 0) || !(__SELECTED_FEATURE_base == 1)) || !(waterLevel <= 2)) || (2 <= waterLevel && pumpRunning == 1)) || 0 == systemActive) || (2 <= waterLevel && pumpRunning == switchedOnBeforeTS)) || !(switchedOnBeforeTS == \old(pumpRunning))) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && waterLevel == 1) && __SELECTED_FEATURE_base == 1) && pumpRunning == switchedOnBeforeTS) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-12-14 06:16:10,477 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9155b305-f211-4384-b20d-1de2104205db/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE