./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d2302423425d09a02191583f4a443e0b9b2d72b45fd4f1bcb2e2d3ac85995a3d --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 21:48:16,236 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 21:48:16,238 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 21:48:16,275 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 21:48:16,275 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 21:48:16,277 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 21:48:16,278 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 21:48:16,280 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 21:48:16,282 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 21:48:16,283 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 21:48:16,290 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 21:48:16,291 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 21:48:16,291 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 21:48:16,293 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 21:48:16,294 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 21:48:16,295 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 21:48:16,296 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 21:48:16,297 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 21:48:16,299 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 21:48:16,302 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 21:48:16,303 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 21:48:16,305 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 21:48:16,306 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 21:48:16,307 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 21:48:16,313 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 21:48:16,313 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 21:48:16,314 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 21:48:16,315 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 21:48:16,315 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 21:48:16,316 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 21:48:16,317 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 21:48:16,317 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 21:48:16,318 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 21:48:16,319 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 21:48:16,320 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 21:48:16,320 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 21:48:16,321 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 21:48:16,321 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 21:48:16,321 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 21:48:16,322 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 21:48:16,322 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 21:48:16,323 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 21:48:16,339 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 21:48:16,339 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 21:48:16,339 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 21:48:16,340 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 21:48:16,340 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 21:48:16,340 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 21:48:16,341 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 21:48:16,341 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 21:48:16,341 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 21:48:16,341 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 21:48:16,341 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 21:48:16,341 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 21:48:16,341 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 21:48:16,342 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 21:48:16,343 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 21:48:16,343 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 21:48:16,343 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 21:48:16,344 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d2302423425d09a02191583f4a443e0b9b2d72b45fd4f1bcb2e2d3ac85995a3d [2021-12-06 21:48:16,515 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 21:48:16,530 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 21:48:16,532 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 21:48:16,533 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 21:48:16,534 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 21:48:16,534 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c [2021-12-06 21:48:16,573 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/data/565e35e3a/8f3b2fb21f8c4cb8b01230b3f70ed3a3/FLAG326107942 [2021-12-06 21:48:16,973 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 21:48:16,973 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c [2021-12-06 21:48:16,981 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/data/565e35e3a/8f3b2fb21f8c4cb8b01230b3f70ed3a3/FLAG326107942 [2021-12-06 21:48:16,992 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/data/565e35e3a/8f3b2fb21f8c4cb8b01230b3f70ed3a3 [2021-12-06 21:48:16,994 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 21:48:16,995 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 21:48:16,997 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 21:48:16,997 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 21:48:16,999 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 21:48:17,000 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 09:48:16" (1/1) ... [2021-12-06 21:48:17,001 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5741c011 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17, skipping insertion in model container [2021-12-06 21:48:17,001 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 09:48:16" (1/1) ... [2021-12-06 21:48:17,006 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 21:48:17,040 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 21:48:17,183 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c[5831,5844] [2021-12-06 21:48:17,228 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 21:48:17,236 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 21:48:17,266 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c[5831,5844] [2021-12-06 21:48:17,303 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 21:48:17,317 INFO L208 MainTranslator]: Completed translation [2021-12-06 21:48:17,318 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17 WrapperNode [2021-12-06 21:48:17,318 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 21:48:17,319 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 21:48:17,319 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 21:48:17,319 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 21:48:17,324 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,338 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,361 INFO L137 Inliner]: procedures = 53, calls = 153, calls flagged for inlining = 19, calls inlined = 15, statements flattened = 203 [2021-12-06 21:48:17,361 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 21:48:17,362 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 21:48:17,362 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 21:48:17,362 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 21:48:17,368 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,369 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,372 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,372 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,378 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,383 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,385 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,388 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 21:48:17,388 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 21:48:17,389 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 21:48:17,389 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 21:48:17,390 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (1/1) ... [2021-12-06 21:48:17,396 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 21:48:17,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 21:48:17,416 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 21:48:17,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 21:48:17,444 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 21:48:17,444 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 21:48:17,444 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 21:48:17,444 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-06 21:48:17,444 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 21:48:17,445 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 21:48:17,445 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 21:48:17,445 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 21:48:17,445 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 21:48:17,445 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 21:48:17,445 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 21:48:17,446 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 21:48:17,446 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 21:48:17,446 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 21:48:17,446 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 21:48:17,495 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 21:48:17,496 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 21:48:17,693 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 21:48:17,698 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 21:48:17,698 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 21:48:17,700 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:48:17 BoogieIcfgContainer [2021-12-06 21:48:17,700 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 21:48:17,701 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 21:48:17,701 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 21:48:17,704 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 21:48:17,704 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 09:48:16" (1/3) ... [2021-12-06 21:48:17,704 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7136bfc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 09:48:17, skipping insertion in model container [2021-12-06 21:48:17,705 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 09:48:17" (2/3) ... [2021-12-06 21:48:17,705 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7136bfc5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 09:48:17, skipping insertion in model container [2021-12-06 21:48:17,705 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:48:17" (3/3) ... [2021-12-06 21:48:17,706 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product15.cil.c [2021-12-06 21:48:17,710 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 21:48:17,710 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 21:48:17,752 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 21:48:17,757 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 21:48:17,757 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 21:48:17,771 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 69 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-06 21:48:17,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-06 21:48:17,776 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:48:17,776 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:48:17,777 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:48:17,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:48:17,781 INFO L85 PathProgramCache]: Analyzing trace with hash -326168501, now seen corresponding path program 1 times [2021-12-06 21:48:17,787 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:48:17,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699663380] [2021-12-06 21:48:17,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:48:17,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:48:17,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:17,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-06 21:48:17,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:17,937 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:48:17,938 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:48:17,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699663380] [2021-12-06 21:48:17,938 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699663380] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:48:17,938 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:48:17,938 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 21:48:17,940 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1447423280] [2021-12-06 21:48:17,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:48:17,943 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 21:48:17,943 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:48:17,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 21:48:17,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 21:48:17,965 INFO L87 Difference]: Start difference. First operand has 85 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 69 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:17,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:48:17,989 INFO L93 Difference]: Finished difference Result 161 states and 216 transitions. [2021-12-06 21:48:17,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 21:48:17,990 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-06 21:48:17,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:48:17,997 INFO L225 Difference]: With dead ends: 161 [2021-12-06 21:48:17,997 INFO L226 Difference]: Without dead ends: 76 [2021-12-06 21:48:18,000 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 21:48:18,003 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:48:18,004 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:48:18,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-06 21:48:18,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-06 21:48:18,033 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 55 states have (on average 1.290909090909091) internal successors, (71), 61 states have internal predecessors, (71), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-06 21:48:18,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 96 transitions. [2021-12-06 21:48:18,035 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 96 transitions. Word has length 25 [2021-12-06 21:48:18,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:48:18,036 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 96 transitions. [2021-12-06 21:48:18,036 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,036 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 96 transitions. [2021-12-06 21:48:18,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-06 21:48:18,038 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:48:18,038 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:48:18,038 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 21:48:18,038 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:48:18,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:48:18,039 INFO L85 PathProgramCache]: Analyzing trace with hash -1971183804, now seen corresponding path program 1 times [2021-12-06 21:48:18,039 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:48:18,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [966824266] [2021-12-06 21:48:18,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:48:18,040 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:48:18,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 21:48:18,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:48:18,100 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:48:18,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [966824266] [2021-12-06 21:48:18,101 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [966824266] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:48:18,101 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:48:18,101 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 21:48:18,101 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [593018654] [2021-12-06 21:48:18,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:48:18,103 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 21:48:18,103 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:48:18,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 21:48:18,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 21:48:18,104 INFO L87 Difference]: Start difference. First operand 76 states and 96 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:48:18,119 INFO L93 Difference]: Finished difference Result 113 states and 141 transitions. [2021-12-06 21:48:18,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 21:48:18,120 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-06 21:48:18,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:48:18,122 INFO L225 Difference]: With dead ends: 113 [2021-12-06 21:48:18,122 INFO L226 Difference]: Without dead ends: 67 [2021-12-06 21:48:18,123 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 21:48:18,125 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 16 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:48:18,126 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:48:18,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2021-12-06 21:48:18,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2021-12-06 21:48:18,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 49 states have (on average 1.3061224489795917) internal successors, (64), 55 states have internal predecessors, (64), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2021-12-06 21:48:18,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 84 transitions. [2021-12-06 21:48:18,137 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 84 transitions. Word has length 26 [2021-12-06 21:48:18,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:48:18,137 INFO L470 AbstractCegarLoop]: Abstraction has 67 states and 84 transitions. [2021-12-06 21:48:18,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,138 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 84 transitions. [2021-12-06 21:48:18,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-06 21:48:18,139 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:48:18,139 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:48:18,139 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 21:48:18,140 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:48:18,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:48:18,140 INFO L85 PathProgramCache]: Analyzing trace with hash -409860073, now seen corresponding path program 1 times [2021-12-06 21:48:18,141 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:48:18,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608737614] [2021-12-06 21:48:18,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:48:18,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:48:18,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-06 21:48:18,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,230 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:48:18,230 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:48:18,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608737614] [2021-12-06 21:48:18,230 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608737614] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:48:18,230 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:48:18,230 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 21:48:18,230 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682003680] [2021-12-06 21:48:18,231 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:48:18,231 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 21:48:18,231 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:48:18,231 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 21:48:18,231 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 21:48:18,232 INFO L87 Difference]: Start difference. First operand 67 states and 84 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:48:18,339 INFO L93 Difference]: Finished difference Result 227 states and 293 transitions. [2021-12-06 21:48:18,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 21:48:18,340 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-06 21:48:18,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:48:18,342 INFO L225 Difference]: With dead ends: 227 [2021-12-06 21:48:18,342 INFO L226 Difference]: Without dead ends: 168 [2021-12-06 21:48:18,343 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 21:48:18,344 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 222 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 21:48:18,344 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [222 Valid, 387 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 21:48:18,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2021-12-06 21:48:18,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 162. [2021-12-06 21:48:18,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 117 states have (on average 1.3504273504273505) internal successors, (158), 131 states have internal predecessors, (158), 25 states have call successors, (25), 19 states have call predecessors, (25), 19 states have return successors, (26), 19 states have call predecessors, (26), 25 states have call successors, (26) [2021-12-06 21:48:18,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 209 transitions. [2021-12-06 21:48:18,370 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 209 transitions. Word has length 30 [2021-12-06 21:48:18,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:48:18,370 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 209 transitions. [2021-12-06 21:48:18,370 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,370 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 209 transitions. [2021-12-06 21:48:18,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-06 21:48:18,372 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 21:48:18,372 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 21:48:18,372 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 21:48:18,372 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 21:48:18,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 21:48:18,372 INFO L85 PathProgramCache]: Analyzing trace with hash 1560227681, now seen corresponding path program 1 times [2021-12-06 21:48:18,372 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 21:48:18,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980953667] [2021-12-06 21:48:18,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 21:48:18,373 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 21:48:18,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 21:48:18,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 21:48:18,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 21:48:18,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 21:48:18,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980953667] [2021-12-06 21:48:18,426 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980953667] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 21:48:18,427 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 21:48:18,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 21:48:18,427 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2033291198] [2021-12-06 21:48:18,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 21:48:18,427 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 21:48:18,427 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 21:48:18,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 21:48:18,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 21:48:18,428 INFO L87 Difference]: Start difference. First operand 162 states and 209 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 21:48:18,454 INFO L93 Difference]: Finished difference Result 282 states and 368 transitions. [2021-12-06 21:48:18,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 21:48:18,455 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-06 21:48:18,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 21:48:18,455 INFO L225 Difference]: With dead ends: 282 [2021-12-06 21:48:18,455 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 21:48:18,457 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 21:48:18,458 INFO L933 BasicCegarLoop]: 53 mSDtfsCounter, 37 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 21:48:18,458 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [37 Valid, 154 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 21:48:18,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 21:48:18,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 21:48:18,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 21:48:18,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 21:48:18,459 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2021-12-06 21:48:18,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 21:48:18,460 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 21:48:18,460 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-06 21:48:18,460 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 21:48:18,460 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 21:48:18,462 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 21:48:18,462 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 21:48:18,464 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 21:48:18,645 INFO L861 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 145 152) the Hoare annotation is: true [2021-12-06 21:48:18,645 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 145 152) no Hoare annotation was computed. [2021-12-06 21:48:18,645 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 145 152) no Hoare annotation was computed. [2021-12-06 21:48:18,645 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 322 333) the Hoare annotation is: true [2021-12-06 21:48:18,645 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 322 333) no Hoare annotation was computed. [2021-12-06 21:48:18,645 INFO L858 garLoopResultBuilder]: For program point L326-1(lines 322 333) no Hoare annotation was computed. [2021-12-06 21:48:18,645 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 829 858) no Hoare annotation was computed. [2021-12-06 21:48:18,645 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 829 858) the Hoare annotation is: true [2021-12-06 21:48:18,645 INFO L861 garLoopResultBuilder]: At program point L854(lines 829 858) the Hoare annotation is: true [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point L850(line 850) no Hoare annotation was computed. [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2021-12-06 21:48:18,646 INFO L861 garLoopResultBuilder]: At program point L843-1(lines 843 847) the Hoare annotation is: true [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point L840(line 840) no Hoare annotation was computed. [2021-12-06 21:48:18,646 INFO L861 garLoopResultBuilder]: At program point L839-2(lines 839 853) the Hoare annotation is: true [2021-12-06 21:48:18,646 INFO L861 garLoopResultBuilder]: At program point L835(line 835) the Hoare annotation is: true [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point L835-1(line 835) no Hoare annotation was computed. [2021-12-06 21:48:18,646 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 334 342) the Hoare annotation is: true [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 334 342) no Hoare annotation was computed. [2021-12-06 21:48:18,646 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 334 342) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L854 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2021-12-06 21:48:18,647 INFO L854 garLoopResultBuilder]: At program point L114-1(lines 95 119) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 63 86) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L854 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point L804-1(line 804) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L854 garLoopResultBuilder]: At program point L169(lines 164 172) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point L103(lines 103 111) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point L99(lines 99 116) no Hoare annotation was computed. [2021-12-06 21:48:18,647 INFO L858 garLoopResultBuilder]: For program point L380(line 380) no Hoare annotation was computed. [2021-12-06 21:48:18,648 INFO L858 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2021-12-06 21:48:18,648 INFO L854 garLoopResultBuilder]: At program point L302-2(lines 298 309) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-06 21:48:18,648 INFO L858 garLoopResultBuilder]: For program point L810(lines 810 820) no Hoare annotation was computed. [2021-12-06 21:48:18,648 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 823) no Hoare annotation was computed. [2021-12-06 21:48:18,648 INFO L854 garLoopResultBuilder]: At program point L806-1(lines 798 826) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-06 21:48:18,648 INFO L858 garLoopResultBuilder]: For program point L67-1(lines 66 85) no Hoare annotation was computed. [2021-12-06 21:48:18,648 INFO L854 garLoopResultBuilder]: At program point L381(lines 376 383) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-06 21:48:18,648 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 63 86) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2021-12-06 21:48:18,648 INFO L854 garLoopResultBuilder]: At program point L109(line 109) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-06 21:48:18,648 INFO L858 garLoopResultBuilder]: For program point L811(lines 811 817) no Hoare annotation was computed. [2021-12-06 21:48:18,649 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 63 86) no Hoare annotation was computed. [2021-12-06 21:48:18,649 INFO L854 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-06 21:48:18,649 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 380) no Hoare annotation was computed. [2021-12-06 21:48:18,649 INFO L854 garLoopResultBuilder]: At program point L101(line 101) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2021-12-06 21:48:18,649 INFO L858 garLoopResultBuilder]: For program point L101-1(line 101) no Hoare annotation was computed. [2021-12-06 21:48:18,649 INFO L858 garLoopResultBuilder]: For program point L258-1(lines 258 264) no Hoare annotation was computed. [2021-12-06 21:48:18,649 INFO L854 garLoopResultBuilder]: At program point L221(lines 209 223) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-12-06 21:48:18,649 INFO L854 garLoopResultBuilder]: At program point L795(lines 790 797) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2021-12-06 21:48:18,650 INFO L854 garLoopResultBuilder]: At program point L283(lines 238 285) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-12-06 21:48:18,650 INFO L854 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point L911(lines 911 918) no Hoare annotation was computed. [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point L911-2(lines 911 918) no Hoare annotation was computed. [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 21:48:18,650 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 21:48:18,651 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 21:48:18,651 INFO L861 garLoopResultBuilder]: At program point L920(lines 901 923) the Hoare annotation is: true [2021-12-06 21:48:18,651 INFO L854 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2021-12-06 21:48:18,651 INFO L854 garLoopResultBuilder]: At program point L784(lines 779 787) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) [2021-12-06 21:48:18,651 INFO L858 garLoopResultBuilder]: For program point L239(lines 238 285) no Hoare annotation was computed. [2021-12-06 21:48:18,651 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 281) no Hoare annotation was computed. [2021-12-06 21:48:18,652 INFO L854 garLoopResultBuilder]: At program point L776(lines 772 778) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2021-12-06 21:48:18,652 INFO L854 garLoopResultBuilder]: At program point L260(line 260) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-12-06 21:48:18,652 INFO L861 garLoopResultBuilder]: At program point L289(lines 228 293) the Hoare annotation is: true [2021-12-06 21:48:18,652 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 21:48:18,652 INFO L858 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2021-12-06 21:48:18,652 INFO L858 garLoopResultBuilder]: For program point L248-1(lines 248 254) no Hoare annotation was computed. [2021-12-06 21:48:18,653 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: false [2021-12-06 21:48:18,653 INFO L858 garLoopResultBuilder]: For program point L240(lines 240 244) no Hoare annotation was computed. [2021-12-06 21:48:18,653 INFO L854 garLoopResultBuilder]: At program point L769(lines 765 771) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2021-12-06 21:48:18,653 INFO L854 garLoopResultBuilder]: At program point L286(lines 237 287) the Hoare annotation is: false [2021-12-06 21:48:18,653 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 280) no Hoare annotation was computed. [2021-12-06 21:48:18,653 INFO L854 garLoopResultBuilder]: At program point L274-2(lines 268 281) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2021-12-06 21:48:18,653 INFO L858 garLoopResultBuilder]: For program point L258(lines 258 264) no Hoare annotation was computed. [2021-12-06 21:48:18,654 INFO L861 garLoopResultBuilder]: At program point L898(lines 890 900) the Hoare annotation is: true [2021-12-06 21:48:18,654 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 310 321) no Hoare annotation was computed. [2021-12-06 21:48:18,654 INFO L858 garLoopResultBuilder]: For program point L314-1(lines 310 321) no Hoare annotation was computed. [2021-12-06 21:48:18,654 INFO L861 garLoopResultBuilder]: At program point waterRiseENTRY(lines 310 321) the Hoare annotation is: true [2021-12-06 21:48:18,654 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 87 93) no Hoare annotation was computed. [2021-12-06 21:48:18,654 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 87 93) the Hoare annotation is: true [2021-12-06 21:48:18,654 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 153 163) the Hoare annotation is: true [2021-12-06 21:48:18,655 INFO L861 garLoopResultBuilder]: At program point L158(line 158) the Hoare annotation is: true [2021-12-06 21:48:18,655 INFO L858 garLoopResultBuilder]: For program point L158-1(line 158) no Hoare annotation was computed. [2021-12-06 21:48:18,655 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 153 163) no Hoare annotation was computed. [2021-12-06 21:48:18,655 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 153 163) no Hoare annotation was computed. [2021-12-06 21:48:18,658 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2021-12-06 21:48:18,659 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 21:48:18,672 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 09:48:18 BoogieIcfgContainer [2021-12-06 21:48:18,672 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 21:48:18,673 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 21:48:18,673 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 21:48:18,673 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 21:48:18,673 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 09:48:17" (3/4) ... [2021-12-06 21:48:18,675 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 21:48:18,679 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 21:48:18,679 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 21:48:18,679 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 21:48:18,679 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-06 21:48:18,679 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 21:48:18,680 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 21:48:18,680 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 21:48:18,680 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 21:48:18,687 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2021-12-06 21:48:18,687 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 21:48:18,688 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 21:48:18,688 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 21:48:18,689 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 21:48:18,689 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 21:48:18,690 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 21:48:18,709 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (pumpRunning == 0 && 1 == systemActive) && \result == systemActive [2021-12-06 21:48:18,710 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive [2021-12-06 21:48:18,710 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive [2021-12-06 21:48:18,710 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-06 21:48:18,711 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(0 == systemActive)) [2021-12-06 21:48:18,712 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2021-12-06 21:48:18,712 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) [2021-12-06 21:48:18,713 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2021-12-06 21:48:18,735 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 21:48:18,735 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 21:48:18,736 INFO L158 Benchmark]: Toolchain (without parser) took 1740.33ms. Allocated memory is still 107.0MB. Free memory was 81.7MB in the beginning and 45.9MB in the end (delta: 35.8MB). Peak memory consumption was 38.7MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,736 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 75.5MB. Free memory is still 44.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 21:48:18,736 INFO L158 Benchmark]: CACSL2BoogieTranslator took 321.53ms. Allocated memory is still 107.0MB. Free memory was 81.5MB in the beginning and 63.0MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,736 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.39ms. Allocated memory is still 107.0MB. Free memory was 63.0MB in the beginning and 60.9MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,737 INFO L158 Benchmark]: Boogie Preprocessor took 26.19ms. Allocated memory is still 107.0MB. Free memory was 60.7MB in the beginning and 59.4MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,737 INFO L158 Benchmark]: RCFGBuilder took 311.80ms. Allocated memory is still 107.0MB. Free memory was 59.2MB in the beginning and 43.7MB in the end (delta: 15.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,737 INFO L158 Benchmark]: TraceAbstraction took 970.76ms. Allocated memory is still 107.0MB. Free memory was 43.2MB in the beginning and 51.6MB in the end (delta: -8.4MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 21:48:18,738 INFO L158 Benchmark]: Witness Printer took 62.66ms. Allocated memory is still 107.0MB. Free memory was 51.6MB in the beginning and 45.9MB in the end (delta: 5.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-06 21:48:18,739 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 75.5MB. Free memory is still 44.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 321.53ms. Allocated memory is still 107.0MB. Free memory was 81.5MB in the beginning and 63.0MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.39ms. Allocated memory is still 107.0MB. Free memory was 63.0MB in the beginning and 60.9MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.19ms. Allocated memory is still 107.0MB. Free memory was 60.7MB in the beginning and 59.4MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 311.80ms. Allocated memory is still 107.0MB. Free memory was 59.2MB in the beginning and 43.7MB in the end (delta: 15.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 970.76ms. Allocated memory is still 107.0MB. Free memory was 43.2MB in the beginning and 51.6MB in the end (delta: -8.4MB). There was no memory consumed. Max. memory is 16.1GB. * Witness Printer took 62.66ms. Allocated memory is still 107.0MB. Free memory was 51.6MB in the beginning and 45.9MB in the end (delta: 5.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 380]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 0.9s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 279 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 275 mSDsluCounter, 791 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 444 mSDsCounter, 36 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 110 IncrementalHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 36 mSolverCounterUnsat, 347 mSDtfsCounter, 110 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 27 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=162occurred in iteration=3, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 6 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 219 PreInvPairs, 258 NumberOfFragments, 184 HoareAnnotationTreeSize, 219 FomulaSimplifications, 42 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 38 FomulaSimplificationsInter, 596 FormulaSimplificationTreeSizeReductionInter, 0.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.2s InterpolantComputationTime, 115 NumberOfCodeBlocks, 115 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 111 ConstructedInterpolants, 0 QuantifiedInterpolants, 220 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(0 == systemActive)) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive - InvariantResult [Line: 798]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && \result == systemActive - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-12-06 21:48:18,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_74fae725-96ef-44d7-ae9e-36ed7721ed6a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE