./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product43_false-unreach-call_false-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product43_false-unreach-call_false-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/config/svcomp-Reach-32bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 63b48aee14c7431a4aa25f8de4f2dd8129d50ad4 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-08 21:23:29,716 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-08 21:23:29,717 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-08 21:23:29,726 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-08 21:23:29,726 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-08 21:23:29,726 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-08 21:23:29,727 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-08 21:23:29,728 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-08 21:23:29,730 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-08 21:23:29,730 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-08 21:23:29,731 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-08 21:23:29,731 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-08 21:23:29,732 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-08 21:23:29,733 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-08 21:23:29,733 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-08 21:23:29,734 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-08 21:23:29,735 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-08 21:23:29,736 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-08 21:23:29,737 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-08 21:23:29,738 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-08 21:23:29,739 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-08 21:23:29,740 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-08 21:23:29,741 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-08 21:23:29,742 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-08 21:23:29,742 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-08 21:23:29,742 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-08 21:23:29,743 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-08 21:23:29,744 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-08 21:23:29,744 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-08 21:23:29,745 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-08 21:23:29,745 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-08 21:23:29,745 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-08 21:23:29,746 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-08 21:23:29,746 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-08 21:23:29,746 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-08 21:23:29,747 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-08 21:23:29,747 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/config/svcomp-Reach-32bit-Kojak_Default.epf [2018-12-08 21:23:29,757 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-08 21:23:29,757 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-08 21:23:29,758 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-12-08 21:23:29,758 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-12-08 21:23:29,758 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-08 21:23:29,758 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-08 21:23:29,759 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-12-08 21:23:29,759 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-08 21:23:29,760 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-08 21:23:29,760 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-08 21:23:29,760 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-12-08 21:23:29,760 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-12-08 21:23:29,760 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-12-08 21:23:29,760 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-08 21:23:29,760 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-12-08 21:23:29,761 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-12-08 21:23:29,761 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 63b48aee14c7431a4aa25f8de4f2dd8129d50ad4 [2018-12-08 21:23:29,781 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-08 21:23:29,788 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-08 21:23:29,790 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-08 21:23:29,791 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-08 21:23:29,791 INFO L276 PluginConnector]: CDTParser initialized [2018-12-08 21:23:29,791 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/../../sv-benchmarks/c/product-lines/minepump_spec1_product43_false-unreach-call_false-termination.cil.c [2018-12-08 21:23:29,825 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/data/637d0514c/c2997919d40344898a895e967decb1da/FLAG752257422 [2018-12-08 21:23:30,201 INFO L307 CDTParser]: Found 1 translation units. [2018-12-08 21:23:30,201 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/sv-benchmarks/c/product-lines/minepump_spec1_product43_false-unreach-call_false-termination.cil.c [2018-12-08 21:23:30,207 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/data/637d0514c/c2997919d40344898a895e967decb1da/FLAG752257422 [2018-12-08 21:23:30,561 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/data/637d0514c/c2997919d40344898a895e967decb1da [2018-12-08 21:23:30,563 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-08 21:23:30,564 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-08 21:23:30,564 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-08 21:23:30,565 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-08 21:23:30,567 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-08 21:23:30,568 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,571 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6952e9a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30, skipping insertion in model container [2018-12-08 21:23:30,571 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,579 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-08 21:23:30,618 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-08 21:23:30,785 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 21:23:30,825 INFO L191 MainTranslator]: Completed pre-run [2018-12-08 21:23:30,864 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-08 21:23:30,878 INFO L195 MainTranslator]: Completed translation [2018-12-08 21:23:30,878 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30 WrapperNode [2018-12-08 21:23:30,878 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-08 21:23:30,879 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-08 21:23:30,879 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-08 21:23:30,879 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-08 21:23:30,884 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,893 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,910 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-08 21:23:30,910 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-08 21:23:30,910 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-08 21:23:30,910 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-08 21:23:30,916 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,916 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,918 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,918 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,921 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,925 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,926 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... [2018-12-08 21:23:30,927 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-08 21:23:30,928 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-08 21:23:30,928 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-08 21:23:30,928 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-08 21:23:30,928 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.12 09:23:30" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2018-12-08 21:23:30,961 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2018-12-08 21:23:30,961 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2018-12-08 21:23:30,961 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2018-12-08 21:23:30,961 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2018-12-08 21:23:30,961 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2018-12-08 21:23:30,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-08 21:23:30,962 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2018-12-08 21:23:30,962 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2018-12-08 21:23:30,962 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-08 21:23:30,962 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-08 21:23:31,389 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-08 21:23:31,389 INFO L280 CfgBuilder]: Removed 42 assue(true) statements. [2018-12-08 21:23:31,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 09:23:31 BoogieIcfgContainer [2018-12-08 21:23:31,389 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-08 21:23:31,390 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-12-08 21:23:31,390 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-12-08 21:23:31,398 INFO L276 PluginConnector]: CodeCheck initialized [2018-12-08 21:23:31,398 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 09:23:31" (1/1) ... [2018-12-08 21:23:31,405 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-08 21:23:31,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:31,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 48 states and 63 transitions. [2018-12-08 21:23:31,431 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 63 transitions. [2018-12-08 21:23:31,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-12-08 21:23:31,435 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:31,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:31,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:31,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:31,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 48 states and 61 transitions. [2018-12-08 21:23:31,550 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 61 transitions. [2018-12-08 21:23:31,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-12-08 21:23:31,551 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:31,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:31,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:31,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:31,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 50 states and 64 transitions. [2018-12-08 21:23:31,608 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 64 transitions. [2018-12-08 21:23:31,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2018-12-08 21:23:31,608 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:31,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:31,681 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:31,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:31,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 63 states and 90 transitions. [2018-12-08 21:23:31,811 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 90 transitions. [2018-12-08 21:23:31,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-12-08 21:23:31,812 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:31,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:31,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:31,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:31,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 64 states and 91 transitions. [2018-12-08 21:23:31,855 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 91 transitions. [2018-12-08 21:23:31,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-12-08 21:23:31,857 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:31,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:31,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:32,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:32,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 79 states and 121 transitions. [2018-12-08 21:23:32,591 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 121 transitions. [2018-12-08 21:23:32,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-12-08 21:23:32,592 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:32,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:32,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:32,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:32,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 80 states and 122 transitions. [2018-12-08 21:23:32,644 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 122 transitions. [2018-12-08 21:23:32,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2018-12-08 21:23:32,645 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:32,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:32,702 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:32,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:32,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 85 states and 135 transitions. [2018-12-08 21:23:32,891 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 135 transitions. [2018-12-08 21:23:32,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2018-12-08 21:23:32,892 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:32,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:32,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:32,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:32,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 88 states and 139 transitions. [2018-12-08 21:23:32,924 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 139 transitions. [2018-12-08 21:23:32,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2018-12-08 21:23:32,925 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:32,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:32,949 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-12-08 21:23:32,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:32,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 90 states and 141 transitions. [2018-12-08 21:23:32,961 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 141 transitions. [2018-12-08 21:23:32,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2018-12-08 21:23:32,962 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:32,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:32,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:33,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:33,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 93 states and 148 transitions. [2018-12-08 21:23:33,087 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 148 transitions. [2018-12-08 21:23:33,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2018-12-08 21:23:33,088 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:33,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:33,109 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-08 21:23:33,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:33,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 93 states and 147 transitions. [2018-12-08 21:23:33,120 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 147 transitions. [2018-12-08 21:23:33,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2018-12-08 21:23:33,121 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:33,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:33,281 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-12-08 21:23:33,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:33,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 102 states and 167 transitions. [2018-12-08 21:23:33,766 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 167 transitions. [2018-12-08 21:23:33,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2018-12-08 21:23:33,767 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:33,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:33,819 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:34,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:34,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 108 states and 183 transitions. [2018-12-08 21:23:34,172 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 183 transitions. [2018-12-08 21:23:34,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-12-08 21:23:34,173 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:34,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:34,192 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:34,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:34,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 106 states and 179 transitions. [2018-12-08 21:23:34,207 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 179 transitions. [2018-12-08 21:23:34,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2018-12-08 21:23:34,208 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:34,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:34,223 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-12-08 21:23:34,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:34,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 108 states and 180 transitions. [2018-12-08 21:23:34,340 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 180 transitions. [2018-12-08 21:23:34,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-12-08 21:23:34,340 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:34,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:34,352 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:34,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:34,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 110 states and 185 transitions. [2018-12-08 21:23:34,604 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 185 transitions. [2018-12-08 21:23:34,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-12-08 21:23:34,605 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:34,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:34,619 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-12-08 21:23:34,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:34,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 112 states and 187 transitions. [2018-12-08 21:23:34,631 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 187 transitions. [2018-12-08 21:23:34,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-12-08 21:23:34,631 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:34,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:34,764 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:35,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:35,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 127 states and 233 transitions. [2018-12-08 21:23:35,790 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 233 transitions. [2018-12-08 21:23:35,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2018-12-08 21:23:35,791 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:35,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:35,854 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:35,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:35,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 129 states and 235 transitions. [2018-12-08 21:23:35,984 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 235 transitions. [2018-12-08 21:23:35,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-12-08 21:23:35,985 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:35,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:36,046 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:36,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:36,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 139 states and 255 transitions. [2018-12-08 21:23:36,860 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 255 transitions. [2018-12-08 21:23:36,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-12-08 21:23:36,860 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:36,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:36,924 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:37,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:37,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 141 states and 259 transitions. [2018-12-08 21:23:37,083 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 259 transitions. [2018-12-08 21:23:37,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-12-08 21:23:37,083 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:37,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:37,130 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:37,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:37,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 142 states and 260 transitions. [2018-12-08 21:23:37,159 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 260 transitions. [2018-12-08 21:23:37,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-12-08 21:23:37,160 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:37,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:37,211 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:37,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:37,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 143 states and 261 transitions. [2018-12-08 21:23:37,227 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 261 transitions. [2018-12-08 21:23:37,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-12-08 21:23:37,228 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:37,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:37,308 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 9 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:37,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:37,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 149 states and 276 transitions. [2018-12-08 21:23:37,855 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 276 transitions. [2018-12-08 21:23:37,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-12-08 21:23:37,856 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:37,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:37,932 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 9 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-08 21:23:38,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:38,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 155 states and 287 transitions. [2018-12-08 21:23:38,686 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 287 transitions. [2018-12-08 21:23:38,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-12-08 21:23:38,688 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:38,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:38,971 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 2 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-12-08 21:23:40,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:40,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 168 states and 316 transitions. [2018-12-08 21:23:40,760 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 316 transitions. [2018-12-08 21:23:40,761 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-12-08 21:23:40,761 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:40,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:40,803 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 2 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-12-08 21:23:40,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:40,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 349 states to 170 states and 317 transitions. [2018-12-08 21:23:40,973 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 317 transitions. [2018-12-08 21:23:40,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-12-08 21:23:40,974 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:40,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:41,162 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 2 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-12-08 21:23:42,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:42,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 177 states and 323 transitions. [2018-12-08 21:23:42,553 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 323 transitions. [2018-12-08 21:23:42,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2018-12-08 21:23:42,554 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:42,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:42,606 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 2 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-12-08 21:23:42,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:42,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 178 states and 324 transitions. [2018-12-08 21:23:42,626 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 324 transitions. [2018-12-08 21:23:42,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-12-08 21:23:42,627 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:42,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:42,689 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-12-08 21:23:42,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:42,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 181 states and 329 transitions. [2018-12-08 21:23:42,830 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 329 transitions. [2018-12-08 21:23:42,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-12-08 21:23:42,831 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:42,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:42,897 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-12-08 21:23:43,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:43,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 384 states to 186 states and 336 transitions. [2018-12-08 21:23:43,110 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 336 transitions. [2018-12-08 21:23:43,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-12-08 21:23:43,110 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:43,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:43,178 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-12-08 21:23:43,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:43,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 188 states and 337 transitions. [2018-12-08 21:23:43,398 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 337 transitions. [2018-12-08 21:23:43,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-12-08 21:23:43,399 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:43,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:43,458 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-12-08 21:23:43,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:43,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 189 states and 338 transitions. [2018-12-08 21:23:43,472 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 338 transitions. [2018-12-08 21:23:43,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2018-12-08 21:23:43,473 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:43,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-08 21:23:43,861 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-12-08 21:23:47,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-12-08 21:23:47,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 441 states to 202 states and 379 transitions. [2018-12-08 21:23:47,701 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 379 transitions. [2018-12-08 21:23:47,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2018-12-08 21:23:47,702 INFO L431 CodeCheckObserver]: Error Path is FOUND. [2018-12-08 21:23:47,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 21:23:47,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 21:23:47,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 21:23:47,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-08 21:23:47,889 WARN L497 CodeCheckObserver]: This program is UNSAFE, Check terminated with 35 iterations. [2018-12-08 21:23:47,968 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 08.12 09:23:47 ImpRootNode [2018-12-08 21:23:47,968 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-12-08 21:23:47,968 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-08 21:23:47,968 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-08 21:23:47,968 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-08 21:23:47,969 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.12 09:23:31" (3/4) ... [2018-12-08 21:23:47,970 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample [2018-12-08 21:23:48,026 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_b58287f0-d989-4787-885a-61a22a79fb84/bin-2019/ukojak/witness.graphml [2018-12-08 21:23:48,026 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-08 21:23:48,027 INFO L168 Benchmark]: Toolchain (without parser) took 17463.24 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 523.8 MB). Free memory was 956.0 MB in the beginning and 1.2 GB in the end (delta: -250.5 MB). Peak memory consumption was 273.3 MB. Max. memory is 11.5 GB. [2018-12-08 21:23:48,027 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.3 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 21:23:48,027 INFO L168 Benchmark]: CACSL2BoogieTranslator took 313.96 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 124.8 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -151.9 MB). Peak memory consumption was 24.6 MB. Max. memory is 11.5 GB. [2018-12-08 21:23:48,028 INFO L168 Benchmark]: Boogie Procedure Inliner took 31.28 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 21:23:48,028 INFO L168 Benchmark]: Boogie Preprocessor took 17.49 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-08 21:23:48,028 INFO L168 Benchmark]: RCFGBuilder took 461.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 65.8 MB). Peak memory consumption was 65.8 MB. Max. memory is 11.5 GB. [2018-12-08 21:23:48,028 INFO L168 Benchmark]: CodeCheck took 16577.96 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 399.0 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -178.8 MB). Peak memory consumption was 220.2 MB. Max. memory is 11.5 GB. [2018-12-08 21:23:48,028 INFO L168 Benchmark]: Witness Printer took 58.15 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 14.4 MB). Peak memory consumption was 14.4 MB. Max. memory is 11.5 GB. [2018-12-08 21:23:48,029 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 7 procedures, 72 locations, 1 error locations. UNSAFE Result, 16.4s OverallTime, 35 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: -321272680 SDtfs, -1712027598 SDslu, 376920484 SDs, 0 SdLazy, -957401730 SolverSat, -1538388060 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 11.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 13750 GetRequests, 13146 SyntacticMatches, 240 SemanticMatches, 364 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69490 ImplicationChecksByTransitivity, 14.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 1262 NumberOfCodeBlocks, 1262 NumberOfCodeBlocksAsserted, 35 NumberOfCheckSat, 1176 ConstructedInterpolants, 0 QuantifiedInterpolants, 149137 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 34 InterpolantComputations, 21 PerfectInterpolantSequences, 227/365 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - CounterExampleResult [Line: 405]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L47] int waterLevel = 1; [L48] int methaneLevelCritical = 0; [L147] int pumpRunning = 0; [L148] int systemActive = 1; [L436] int cleanupTimeShifts = 4; [L704] static struct __ACC__ERR *head = (struct __ACC__ERR *)0; [L512] int retValue_acc ; [L513] int tmp ; [L927] int retValue_acc ; [L930] retValue_acc = 1 [L931] return (retValue_acc); [L519] tmp = valid_product() [L521] COND TRUE \read(tmp) [L335] int splverifierCounter ; [L336] int tmp ; [L337] int tmp___0 ; [L338] int tmp___1 ; [L339] int tmp___2 ; [L342] splverifierCounter = 0 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L344] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L346] COND TRUE splverifierCounter < 4 [L352] tmp = __VERIFIER_nondet_int() [L354] COND TRUE \read(tmp) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L356] CALL waterRise() VAL [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L65] COND TRUE waterLevel < 2 [L66] waterLevel = waterLevel + 1 [L356] RET waterRise() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L362] tmp___0 = __VERIFIER_nondet_int() [L364] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L372] tmp___2 = __VERIFIER_nondet_int() [L374] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L389] CALL timeShift() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L155] COND FALSE !(\read(pumpRunning)) VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L162] COND TRUE \read(systemActive) [L184] int tmp ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L187] COND TRUE ! pumpRunning [L299] int retValue_acc ; [L300] int tmp ; [L301] int tmp___0 ; [L127] int retValue_acc ; [L130] COND FALSE !(waterLevel < 2) [L134] retValue_acc = 0 [L135] return (retValue_acc); [L305] tmp = isHighWaterSensorDry() [L307] COND FALSE !(\read(tmp)) [L310] tmp___0 = 1 [L312] retValue_acc = tmp___0 [L313] return (retValue_acc); [L189] tmp = isHighWaterLevel() [L191] COND TRUE \read(tmp) [L218] int tmp ; [L243] int retValue_acc ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L247] CALL, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); [L247] RET, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L247] retValue_acc = isMethaneLevelCritical() [L249] return (retValue_acc); [L222] tmp = isMethaneAlarm() [L224] COND FALSE !(\read(tmp)) [L212] pumpRunning = 1 VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L411] int tmp ; [L412] int tmp___0 ; VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L416] CALL, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); [L416] RET, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L416] tmp = isMethaneLevelCritical() [L418] COND FALSE !(\read(tmp)) VAL [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L389] RET timeShift() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L344] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L346] COND TRUE splverifierCounter < 4 [L352] tmp = __VERIFIER_nondet_int() [L354] COND FALSE !(\read(tmp)) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L362] tmp___0 = __VERIFIER_nondet_int() [L364] COND TRUE \read(tmp___0) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L366] CALL changeMethaneLevel() VAL [\old(methaneLevelCritical)=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L77] COND FALSE !(\read(methaneLevelCritical)) [L80] methaneLevelCritical = 1 [L366] RET changeMethaneLevel() VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L372] tmp___2 = __VERIFIER_nondet_int() [L374] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L389] CALL timeShift() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L155] COND TRUE \read(pumpRunning) [L53] COND TRUE waterLevel > 0 [L54] waterLevel = waterLevel - 1 VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L162] COND TRUE \read(systemActive) [L184] int tmp ; VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L187] COND FALSE !(! pumpRunning) VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L202] FCALL processEnvironment__wrappee__base() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L411] int tmp ; [L412] int tmp___0 ; VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L416] CALL, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); [L416] RET, EXPR isMethaneLevelCritical() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L416] tmp = isMethaneLevelCritical() [L418] COND TRUE \read(tmp) [L254] int retValue_acc ; [L257] retValue_acc = pumpRunning [L258] return (retValue_acc); [L420] tmp___0 = isPumpRunning() [L422] COND TRUE \read(tmp___0) VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L405] __VERIFIER_error() VAL [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 982.3 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 313.96 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 124.8 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -151.9 MB). Peak memory consumption was 24.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 31.28 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 17.49 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 461.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 65.8 MB). Peak memory consumption was 65.8 MB. Max. memory is 11.5 GB. * CodeCheck took 16577.96 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 399.0 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -178.8 MB). Peak memory consumption was 220.2 MB. Max. memory is 11.5 GB. * Witness Printer took 58.15 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 14.4 MB). Peak memory consumption was 14.4 MB. Max. memory is 11.5 GB. RESULT: Ultimate proved your program to be incorrect! Received shutdown request...