./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 94c250c59ca6a4ad79cab3b64e0d4d94a65a3d8e8b11f1d4a1323613891ef929 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:58:00,671 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:58:00,674 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:58:00,719 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:58:00,719 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:58:00,722 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:58:00,724 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:58:00,727 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:58:00,728 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:58:00,733 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:58:00,734 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:58:00,735 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:58:00,735 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:58:00,738 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:58:00,739 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:58:00,742 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:58:00,744 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:58:00,745 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:58:00,747 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:58:00,753 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:58:00,754 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:58:00,756 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:58:00,757 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:58:00,758 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:58:00,765 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:58:00,765 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:58:00,765 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:58:00,767 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:58:00,768 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:58:00,768 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:58:00,769 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:58:00,770 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:58:00,771 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:58:00,772 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:58:00,773 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:58:00,773 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:58:00,774 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:58:00,774 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:58:00,775 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:58:00,775 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:58:00,776 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:58:00,778 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:58:00,811 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:58:00,811 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:58:00,812 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:58:00,812 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:58:00,813 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:58:00,813 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:58:00,814 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:58:00,814 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:58:00,815 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:58:00,815 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:58:00,816 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:58:00,816 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:58:00,816 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:58:00,816 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:58:00,817 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:58:00,817 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:58:00,817 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:58:00,817 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:58:00,818 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:58:00,818 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:58:00,818 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:58:00,818 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:58:00,818 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:58:00,819 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:58:00,819 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:00,819 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:58:00,819 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:58:00,820 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:58:00,820 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:58:00,820 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:58:00,820 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:58:00,821 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:58:00,821 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:58:00,821 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:58:00,821 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 94c250c59ca6a4ad79cab3b64e0d4d94a65a3d8e8b11f1d4a1323613891ef929 [2021-12-16 00:58:01,094 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:58:01,128 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:58:01,130 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:58:01,131 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:58:01,132 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:58:01,133 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c [2021-12-16 00:58:01,199 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d617b3243/20f97d5e2efb40c78328551de2913292/FLAGfd488d50b [2021-12-16 00:58:01,633 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:58:01,634 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c [2021-12-16 00:58:01,651 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d617b3243/20f97d5e2efb40c78328551de2913292/FLAGfd488d50b [2021-12-16 00:58:01,973 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d617b3243/20f97d5e2efb40c78328551de2913292 [2021-12-16 00:58:01,976 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:58:01,978 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:58:01,981 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:01,981 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:58:01,984 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:58:01,985 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:01" (1/1) ... [2021-12-16 00:58:01,986 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ee6de13 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:01, skipping insertion in model container [2021-12-16 00:58:01,986 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:01" (1/1) ... [2021-12-16 00:58:01,993 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:58:02,041 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:58:02,246 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c[4542,4555] [2021-12-16 00:58:02,345 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:02,357 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:58:02,384 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product12.cil.c[4542,4555] [2021-12-16 00:58:02,410 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:02,425 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:58:02,426 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02 WrapperNode [2021-12-16 00:58:02,426 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:02,427 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:02,427 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:58:02,427 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:58:02,438 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,449 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,477 INFO L137 Inliner]: procedures = 52, calls = 149, calls flagged for inlining = 21, calls inlined = 16, statements flattened = 190 [2021-12-16 00:58:02,481 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:02,482 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:58:02,482 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:58:02,483 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:58:02,490 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,490 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,493 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,493 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,498 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,503 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,514 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,519 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:58:02,520 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:58:02,521 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:58:02,521 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:58:02,522 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (1/1) ... [2021-12-16 00:58:02,530 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:02,539 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:02,549 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:58:02,551 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:58:02,579 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:58:02,579 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:58:02,579 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:58:02,580 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:58:02,580 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:58:02,580 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:58:02,580 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:58:02,580 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:58:02,580 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:58:02,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:58:02,581 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:58:02,581 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:58:02,581 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:58:02,581 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:58:02,638 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:58:02,640 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:58:02,939 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:58:02,944 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:58:02,945 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:58:02,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:02 BoogieIcfgContainer [2021-12-16 00:58:02,959 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:58:02,961 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:58:02,961 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:58:02,964 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:58:02,964 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:58:01" (1/3) ... [2021-12-16 00:58:02,965 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7f1d57dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:02, skipping insertion in model container [2021-12-16 00:58:02,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:02" (2/3) ... [2021-12-16 00:58:02,965 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7f1d57dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:02, skipping insertion in model container [2021-12-16 00:58:02,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:02" (3/3) ... [2021-12-16 00:58:02,966 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product12.cil.c [2021-12-16 00:58:02,970 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:58:02,970 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:58:03,043 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:58:03,050 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:58:03,051 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:58:03,084 INFO L276 IsEmpty]: Start isEmpty. Operand has 67 states, 53 states have (on average 1.3773584905660377) internal successors, (73), 57 states have internal predecessors, (73), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2021-12-16 00:58:03,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-12-16 00:58:03,090 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:03,090 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:03,091 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:03,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:03,095 INFO L85 PathProgramCache]: Analyzing trace with hash -291127646, now seen corresponding path program 1 times [2021-12-16 00:58:03,101 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:03,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779758726] [2021-12-16 00:58:03,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:03,103 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:03,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:58:03,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:03,325 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:03,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779758726] [2021-12-16 00:58:03,326 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779758726] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:03,326 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:03,326 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:58:03,328 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1453438849] [2021-12-16 00:58:03,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:03,333 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:58:03,334 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:03,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:58:03,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:03,370 INFO L87 Difference]: Start difference. First operand has 67 states, 53 states have (on average 1.3773584905660377) internal successors, (73), 57 states have internal predecessors, (73), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:03,394 INFO L93 Difference]: Finished difference Result 126 states and 169 transitions. [2021-12-16 00:58:03,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:58:03,397 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-12-16 00:58:03,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:03,405 INFO L225 Difference]: With dead ends: 126 [2021-12-16 00:58:03,405 INFO L226 Difference]: Without dead ends: 58 [2021-12-16 00:58:03,409 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:03,414 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:03,415 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:03,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2021-12-16 00:58:03,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2021-12-16 00:58:03,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 46 states have (on average 1.2826086956521738) internal successors, (59), 49 states have internal predecessors, (59), 7 states have call successors, (7), 5 states have call predecessors, (7), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2021-12-16 00:58:03,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 72 transitions. [2021-12-16 00:58:03,466 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 72 transitions. Word has length 23 [2021-12-16 00:58:03,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:03,467 INFO L470 AbstractCegarLoop]: Abstraction has 58 states and 72 transitions. [2021-12-16 00:58:03,467 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,468 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 72 transitions. [2021-12-16 00:58:03,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-16 00:58:03,471 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:03,472 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:03,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:58:03,473 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:03,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:03,477 INFO L85 PathProgramCache]: Analyzing trace with hash -1914493388, now seen corresponding path program 1 times [2021-12-16 00:58:03,477 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:03,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105624008] [2021-12-16 00:58:03,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:03,478 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:03,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:58:03,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,595 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:03,596 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:03,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105624008] [2021-12-16 00:58:03,596 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105624008] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:03,596 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:03,597 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:03,597 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [428895703] [2021-12-16 00:58:03,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:03,598 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:03,598 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:03,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:03,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:03,599 INFO L87 Difference]: Start difference. First operand 58 states and 72 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:03,614 INFO L93 Difference]: Finished difference Result 77 states and 94 transitions. [2021-12-16 00:58:03,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:03,615 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-12-16 00:58:03,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:03,616 INFO L225 Difference]: With dead ends: 77 [2021-12-16 00:58:03,616 INFO L226 Difference]: Without dead ends: 49 [2021-12-16 00:58:03,617 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:03,618 INFO L933 BasicCegarLoop]: 59 mSDtfsCounter, 18 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:03,619 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 96 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:03,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2021-12-16 00:58:03,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2021-12-16 00:58:03,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 40 states have (on average 1.3) internal successors, (52), 43 states have internal predecessors, (52), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2021-12-16 00:58:03,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 60 transitions. [2021-12-16 00:58:03,626 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 60 transitions. Word has length 24 [2021-12-16 00:58:03,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:03,626 INFO L470 AbstractCegarLoop]: Abstraction has 49 states and 60 transitions. [2021-12-16 00:58:03,626 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,626 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 60 transitions. [2021-12-16 00:58:03,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-12-16 00:58:03,627 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:03,627 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:03,628 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:58:03,628 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:03,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:03,629 INFO L85 PathProgramCache]: Analyzing trace with hash -832804307, now seen corresponding path program 1 times [2021-12-16 00:58:03,629 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:03,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323828225] [2021-12-16 00:58:03,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:03,630 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:03,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:58:03,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:03,683 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:03,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323828225] [2021-12-16 00:58:03,684 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323828225] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:03,684 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:03,684 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:03,684 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090771444] [2021-12-16 00:58:03,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:03,685 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:03,685 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:03,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:03,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:03,686 INFO L87 Difference]: Start difference. First operand 49 states and 60 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:03,710 INFO L93 Difference]: Finished difference Result 131 states and 165 transitions. [2021-12-16 00:58:03,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:03,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2021-12-16 00:58:03,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:03,713 INFO L225 Difference]: With dead ends: 131 [2021-12-16 00:58:03,713 INFO L226 Difference]: Without dead ends: 89 [2021-12-16 00:58:03,714 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:03,715 INFO L933 BasicCegarLoop]: 63 mSDtfsCounter, 52 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:03,715 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [52 Valid, 111 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:03,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-12-16 00:58:03,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 84. [2021-12-16 00:58:03,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 67 states have (on average 1.328358208955224) internal successors, (89), 72 states have internal predecessors, (89), 8 states have call successors, (8), 8 states have call predecessors, (8), 8 states have return successors, (8), 8 states have call predecessors, (8), 8 states have call successors, (8) [2021-12-16 00:58:03,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 105 transitions. [2021-12-16 00:58:03,729 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 105 transitions. Word has length 29 [2021-12-16 00:58:03,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:03,730 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 105 transitions. [2021-12-16 00:58:03,730 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,730 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 105 transitions. [2021-12-16 00:58:03,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-16 00:58:03,731 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:03,731 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:03,731 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:58:03,732 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:03,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:03,732 INFO L85 PathProgramCache]: Analyzing trace with hash 106556984, now seen corresponding path program 1 times [2021-12-16 00:58:03,732 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:03,733 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1995208176] [2021-12-16 00:58:03,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:03,733 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:03,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:58:03,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:03,877 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:03,878 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:03,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1995208176] [2021-12-16 00:58:03,878 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1995208176] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:03,879 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:03,879 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:03,879 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535986501] [2021-12-16 00:58:03,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:03,881 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:03,881 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:03,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:03,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:03,882 INFO L87 Difference]: Start difference. First operand 84 states and 105 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:03,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:03,992 INFO L93 Difference]: Finished difference Result 238 states and 306 transitions. [2021-12-16 00:58:03,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:58:03,993 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-16 00:58:03,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:04,000 INFO L225 Difference]: With dead ends: 238 [2021-12-16 00:58:04,000 INFO L226 Difference]: Without dead ends: 161 [2021-12-16 00:58:04,003 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:58:04,005 INFO L933 BasicCegarLoop]: 61 mSDtfsCounter, 34 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:04,005 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [36 Valid, 277 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:04,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2021-12-16 00:58:04,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 155. [2021-12-16 00:58:04,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 122 states have (on average 1.3114754098360655) internal successors, (160), 131 states have internal predecessors, (160), 16 states have call successors, (16), 16 states have call predecessors, (16), 16 states have return successors, (18), 16 states have call predecessors, (18), 16 states have call successors, (18) [2021-12-16 00:58:04,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 194 transitions. [2021-12-16 00:58:04,038 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 194 transitions. Word has length 30 [2021-12-16 00:58:04,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:04,039 INFO L470 AbstractCegarLoop]: Abstraction has 155 states and 194 transitions. [2021-12-16 00:58:04,039 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:04,039 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 194 transitions. [2021-12-16 00:58:04,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-16 00:58:04,040 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:04,040 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:04,040 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:58:04,041 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:04,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:04,041 INFO L85 PathProgramCache]: Analyzing trace with hash -474121476, now seen corresponding path program 1 times [2021-12-16 00:58:04,041 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:04,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851221363] [2021-12-16 00:58:04,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:04,042 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:04,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:04,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:04,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:04,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:58:04,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:04,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:04,101 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:04,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1851221363] [2021-12-16 00:58:04,102 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1851221363] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:04,102 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:04,102 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:04,102 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294503332] [2021-12-16 00:58:04,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:04,103 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:04,103 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:04,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:04,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:04,104 INFO L87 Difference]: Start difference. First operand 155 states and 194 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:58:04,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:04,204 INFO L93 Difference]: Finished difference Result 297 states and 376 transitions. [2021-12-16 00:58:04,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 00:58:04,205 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 34 [2021-12-16 00:58:04,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:04,205 INFO L225 Difference]: With dead ends: 297 [2021-12-16 00:58:04,205 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:58:04,207 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:58:04,208 INFO L933 BasicCegarLoop]: 46 mSDtfsCounter, 47 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:04,208 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [49 Valid, 134 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:04,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:58:04,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:58:04,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:58:04,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:58:04,209 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2021-12-16 00:58:04,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:04,210 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:58:04,210 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:58:04,210 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:58:04,210 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:58:04,213 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:58:04,213 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:58:04,215 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:58:04,516 INFO L858 garLoopResultBuilder]: For program point L321-1(lines 317 328) no Hoare annotation was computed. [2021-12-16 00:58:04,516 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 317 328) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) [2021-12-16 00:58:04,516 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 317 328) no Hoare annotation was computed. [2021-12-16 00:58:04,516 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 329 337) the Hoare annotation is: true [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 329 337) no Hoare annotation was computed. [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 329 337) no Hoare annotation was computed. [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 802 831) no Hoare annotation was computed. [2021-12-16 00:58:04,517 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 802 831) the Hoare annotation is: true [2021-12-16 00:58:04,517 INFO L861 garLoopResultBuilder]: At program point L827(lines 802 831) the Hoare annotation is: true [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point L816(lines 816 820) no Hoare annotation was computed. [2021-12-16 00:58:04,517 INFO L861 garLoopResultBuilder]: At program point L816-1(lines 816 820) the Hoare annotation is: true [2021-12-16 00:58:04,517 INFO L858 garLoopResultBuilder]: For program point L813(line 813) no Hoare annotation was computed. [2021-12-16 00:58:04,518 INFO L861 garLoopResultBuilder]: At program point L812-2(lines 812 826) the Hoare annotation is: true [2021-12-16 00:58:04,518 INFO L861 garLoopResultBuilder]: At program point L808(line 808) the Hoare annotation is: true [2021-12-16 00:58:04,518 INFO L858 garLoopResultBuilder]: For program point L808-1(line 808) no Hoare annotation was computed. [2021-12-16 00:58:04,518 INFO L858 garLoopResultBuilder]: For program point L417(lines 417 430) no Hoare annotation was computed. [2021-12-16 00:58:04,518 INFO L854 garLoopResultBuilder]: At program point L417-1(lines 409 433) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (not (= ~methaneLevelCritical~0 0)) (= |timeShift___utac_acc__Specification1_spec__1_~tmp~2#1| 0)) [2021-12-16 00:58:04,518 INFO L861 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: true [2021-12-16 00:58:04,518 INFO L858 garLoopResultBuilder]: For program point L415-1(line 415) no Hoare annotation was computed. [2021-12-16 00:58:04,518 INFO L858 garLoopResultBuilder]: For program point L285(line 285) no Hoare annotation was computed. [2021-12-16 00:58:04,519 INFO L854 garLoopResultBuilder]: At program point L217(lines 212 220) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (= |timeShift_isPumpRunning_#res#1| 0)))) [2021-12-16 00:58:04,519 INFO L858 garLoopResultBuilder]: For program point L147-1(lines 147 153) no Hoare annotation was computed. [2021-12-16 00:58:04,519 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 136 159) no Hoare annotation was computed. [2021-12-16 00:58:04,519 INFO L861 garLoopResultBuilder]: At program point L164(lines 160 166) the Hoare annotation is: true [2021-12-16 00:58:04,519 INFO L854 garLoopResultBuilder]: At program point L286(lines 281 288) the Hoare annotation is: (not (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,519 INFO L861 garLoopResultBuilder]: At program point timeShiftENTRY(lines 136 159) the Hoare annotation is: true [2021-12-16 00:58:04,519 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 139 158) no Hoare annotation was computed. [2021-12-16 00:58:04,519 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 136 159) no Hoare annotation was computed. [2021-12-16 00:58:04,520 INFO L858 garLoopResultBuilder]: For program point L297(lines 297 301) no Hoare annotation was computed. [2021-12-16 00:58:04,520 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 285) no Hoare annotation was computed. [2021-12-16 00:58:04,520 INFO L854 garLoopResultBuilder]: At program point L297-2(lines 293 304) the Hoare annotation is: (not (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,520 INFO L858 garLoopResultBuilder]: For program point L421(lines 421 427) no Hoare annotation was computed. [2021-12-16 00:58:04,520 INFO L861 garLoopResultBuilder]: At program point L870(lines 863 872) the Hoare annotation is: true [2021-12-16 00:58:04,520 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:58:04,520 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L861 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2021-12-16 00:58:04,521 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L858 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L854 garLoopResultBuilder]: At program point L404(lines 399 407) the Hoare annotation is: (and (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,521 INFO L858 garLoopResultBuilder]: For program point L883(lines 883 890) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L858 garLoopResultBuilder]: For program point L883-2(lines 883 890) no Hoare annotation was computed. [2021-12-16 00:58:04,521 INFO L854 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,522 INFO L854 garLoopResultBuilder]: At program point L396(lines 392 398) the Hoare annotation is: (and (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,522 INFO L854 garLoopResultBuilder]: At program point L198(lines 193 200) the Hoare annotation is: false [2021-12-16 00:58:04,522 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:58:04,522 INFO L861 garLoopResultBuilder]: At program point L892(lines 873 895) the Hoare annotation is: true [2021-12-16 00:58:04,522 INFO L854 garLoopResultBuilder]: At program point L277(lines 272 279) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,522 INFO L854 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2021-12-16 00:58:04,522 INFO L854 garLoopResultBuilder]: At program point L269(lines 257 271) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,522 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2021-12-16 00:58:04,523 INFO L854 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,523 INFO L854 garLoopResultBuilder]: At program point L389(lines 385 391) the Hoare annotation is: (and (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,523 INFO L858 garLoopResultBuilder]: For program point L261(lines 261 267) no Hoare annotation was computed. [2021-12-16 00:58:04,523 INFO L858 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2021-12-16 00:58:04,523 INFO L858 garLoopResultBuilder]: For program point L261-2(lines 261 267) no Hoare annotation was computed. [2021-12-16 00:58:04,523 INFO L858 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2021-12-16 00:58:04,523 INFO L854 garLoopResultBuilder]: At program point L860(lines 856 862) the Hoare annotation is: (and (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,523 INFO L854 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,523 INFO L854 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~pumpRunning~0 0)) [2021-12-16 00:58:04,524 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2021-12-16 00:58:04,524 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2021-12-16 00:58:04,524 INFO L858 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2021-12-16 00:58:04,524 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 305 316) no Hoare annotation was computed. [2021-12-16 00:58:04,524 INFO L858 garLoopResultBuilder]: For program point L309-1(lines 305 316) no Hoare annotation was computed. [2021-12-16 00:58:04,524 INFO L861 garLoopResultBuilder]: At program point waterRiseENTRY(lines 305 316) the Hoare annotation is: true [2021-12-16 00:58:04,527 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2021-12-16 00:58:04,528 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:58:04,548 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:58:04 BoogieIcfgContainer [2021-12-16 00:58:04,548 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:58:04,549 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:58:04,549 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:58:04,549 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:58:04,549 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:02" (3/4) ... [2021-12-16 00:58:04,552 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:58:04,556 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:58:04,556 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:58:04,557 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:58:04,557 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:58:04,557 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:58:04,562 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2021-12-16 00:58:04,562 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:58:04,562 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:58:04,563 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:58:04,563 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:58:04,563 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:04,564 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:04,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(pumpRunning == 0) || !(methaneLevelCritical == 0)) && (!(pumpRunning == 0) || \result == 0) [2021-12-16 00:58:04,604 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:58:04,604 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:58:04,605 INFO L158 Benchmark]: Toolchain (without parser) took 2627.30ms. Allocated memory was 88.1MB in the beginning and 115.3MB in the end (delta: 27.3MB). Free memory was 54.2MB in the beginning and 89.2MB in the end (delta: -35.0MB). Peak memory consumption was 40.9MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,605 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory is still 47.6MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:58:04,605 INFO L158 Benchmark]: CACSL2BoogieTranslator took 445.42ms. Allocated memory is still 88.1MB. Free memory was 54.1MB in the beginning and 56.1MB in the end (delta: -2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,606 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.58ms. Allocated memory is still 88.1MB. Free memory was 56.1MB in the beginning and 53.8MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,606 INFO L158 Benchmark]: Boogie Preprocessor took 37.50ms. Allocated memory is still 88.1MB. Free memory was 53.8MB in the beginning and 52.3MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,606 INFO L158 Benchmark]: RCFGBuilder took 438.89ms. Allocated memory is still 88.1MB. Free memory was 52.3MB in the beginning and 38.4MB in the end (delta: 13.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,607 INFO L158 Benchmark]: TraceAbstraction took 1587.42ms. Allocated memory was 88.1MB in the beginning and 115.3MB in the end (delta: 27.3MB). Free memory was 38.1MB in the beginning and 44.1MB in the end (delta: -6.0MB). Peak memory consumption was 22.3MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,607 INFO L158 Benchmark]: Witness Printer took 55.73ms. Allocated memory is still 115.3MB. Free memory was 44.1MB in the beginning and 89.2MB in the end (delta: -45.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:58:04,608 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory is still 47.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 445.42ms. Allocated memory is still 88.1MB. Free memory was 54.1MB in the beginning and 56.1MB in the end (delta: -2.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.58ms. Allocated memory is still 88.1MB. Free memory was 56.1MB in the beginning and 53.8MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 37.50ms. Allocated memory is still 88.1MB. Free memory was 53.8MB in the beginning and 52.3MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 438.89ms. Allocated memory is still 88.1MB. Free memory was 52.3MB in the beginning and 38.4MB in the end (delta: 13.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * TraceAbstraction took 1587.42ms. Allocated memory was 88.1MB in the beginning and 115.3MB in the end (delta: 27.3MB). Free memory was 38.1MB in the beginning and 44.1MB in the end (delta: -6.0MB). Peak memory consumption was 22.3MB. Max. memory is 16.1GB. * Witness Printer took 55.73ms. Allocated memory is still 115.3MB. Free memory was 44.1MB in the beginning and 89.2MB in the end (delta: -45.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 285]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 6 procedures, 67 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.5s, OverallIterations: 5, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 158 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 151 mSDsluCounter, 699 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 389 mSDsCounter, 14 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 90 IncrementalHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 14 mSolverCounterUnsat, 310 mSDtfsCounter, 90 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 35 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=155occurred in iteration=4, InterpolantAutomatonStates: 22, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 5 MinimizatonAttempts, 11 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 30 LocationsWithAnnotation, 174 PreInvPairs, 214 NumberOfFragments, 146 HoareAnnotationTreeSize, 174 FomulaSimplifications, 16 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 30 FomulaSimplificationsInter, 816 FormulaSimplificationTreeSizeReductionInter, 0.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 140 NumberOfCodeBlocks, 140 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 135 ConstructedInterpolants, 0 QuantifiedInterpolants, 251 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (!(pumpRunning == 0) || !(methaneLevelCritical == 0)) && (!(pumpRunning == 0) || \result == 0) - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (methaneLevelCritical == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: (methaneLevelCritical == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: (splverifierCounter == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 409]: Loop Invariant Derived loop invariant: (!(pumpRunning == 0) || !(methaneLevelCritical == 0)) || tmp == 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: splverifierCounter == 0 && pumpRunning == 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: splverifierCounter == 0 && pumpRunning == 0 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 399]: Loop Invariant Derived loop invariant: (methaneLevelCritical == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: !(pumpRunning == 0) - InvariantResult [Line: 385]: Loop Invariant Derived loop invariant: (methaneLevelCritical == 0 && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: !(pumpRunning == 0) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:58:04,651 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE