./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 61c2d7b2f53adc3803e4e62ab44daa78f4a9bdf9ba37b58d516bb40a6cc23cc6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 11:27:00,682 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 11:27:00,684 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 11:27:00,704 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 11:27:00,705 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 11:27:00,706 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 11:27:00,707 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 11:27:00,709 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 11:27:00,711 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 11:27:00,712 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 11:27:00,713 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 11:27:00,714 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 11:27:00,714 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 11:27:00,716 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 11:27:00,717 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 11:27:00,718 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 11:27:00,719 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 11:27:00,720 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 11:27:00,721 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 11:27:00,723 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 11:27:00,725 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 11:27:00,726 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 11:27:00,727 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 11:27:00,728 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 11:27:00,732 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 11:27:00,732 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 11:27:00,732 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 11:27:00,733 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 11:27:00,734 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 11:27:00,735 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 11:27:00,735 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 11:27:00,736 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 11:27:00,737 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 11:27:00,738 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 11:27:00,739 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 11:27:00,739 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 11:27:00,740 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 11:27:00,740 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 11:27:00,740 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 11:27:00,741 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 11:27:00,742 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 11:27:00,743 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 11:27:00,767 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 11:27:00,767 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 11:27:00,768 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 11:27:00,768 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 11:27:00,769 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 11:27:00,769 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 11:27:00,769 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 11:27:00,770 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 11:27:00,770 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 11:27:00,770 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 11:27:00,770 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 11:27:00,770 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 11:27:00,771 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 11:27:00,771 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 11:27:00,771 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 11:27:00,771 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 11:27:00,771 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 11:27:00,772 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 11:27:00,772 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 11:27:00,772 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 11:27:00,772 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 11:27:00,772 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 11:27:00,773 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 11:27:00,773 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 11:27:00,773 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:27:00,773 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 11:27:00,773 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 11:27:00,774 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 11:27:00,774 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 11:27:00,774 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 11:27:00,774 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 11:27:00,774 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 11:27:00,775 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 11:27:00,775 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 61c2d7b2f53adc3803e4e62ab44daa78f4a9bdf9ba37b58d516bb40a6cc23cc6 [2022-11-20 11:27:01,129 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 11:27:01,157 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 11:27:01,160 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 11:27:01,161 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 11:27:01,162 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 11:27:01,163 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c [2022-11-20 11:27:04,240 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 11:27:04,492 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 11:27:04,493 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c [2022-11-20 11:27:04,514 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/data/3131dab21/fe8809df8daf4f00a087bf4db651adb7/FLAG9d80e548c [2022-11-20 11:27:04,529 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/data/3131dab21/fe8809df8daf4f00a087bf4db651adb7 [2022-11-20 11:27:04,531 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 11:27:04,533 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 11:27:04,534 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 11:27:04,538 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 11:27:04,542 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 11:27:04,543 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:27:04" (1/1) ... [2022-11-20 11:27:04,544 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e9a4eb2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:04, skipping insertion in model container [2022-11-20 11:27:04,544 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:27:04" (1/1) ... [2022-11-20 11:27:04,552 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 11:27:04,614 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 11:27:04,988 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c[13937,13950] [2022-11-20 11:27:05,013 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:27:05,025 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 11:27:05,071 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c[13937,13950] [2022-11-20 11:27:05,081 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:27:05,104 INFO L208 MainTranslator]: Completed translation [2022-11-20 11:27:05,105 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05 WrapperNode [2022-11-20 11:27:05,106 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 11:27:05,107 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 11:27:05,107 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 11:27:05,107 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 11:27:05,115 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,142 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,181 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 23, calls inlined = 19, statements flattened = 174 [2022-11-20 11:27:05,181 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 11:27:05,182 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 11:27:05,182 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 11:27:05,182 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 11:27:05,192 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,193 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,207 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,208 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,211 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,215 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,217 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,218 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,224 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 11:27:05,230 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 11:27:05,230 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 11:27:05,231 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 11:27:05,231 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (1/1) ... [2022-11-20 11:27:05,243 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:27:05,254 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:27:05,268 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 11:27:05,270 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 11:27:05,309 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 11:27:05,309 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 11:27:05,309 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 11:27:05,310 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 11:27:05,310 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 11:27:05,310 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 11:27:05,310 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 11:27:05,310 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 11:27:05,310 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 11:27:05,311 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-20 11:27:05,311 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-20 11:27:05,312 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 11:27:05,312 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 11:27:05,312 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 11:27:05,312 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 11:27:05,312 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 11:27:05,312 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 11:27:05,312 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 11:27:05,388 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 11:27:05,391 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 11:27:05,621 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 11:27:05,628 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 11:27:05,628 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 11:27:05,630 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:27:05 BoogieIcfgContainer [2022-11-20 11:27:05,630 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 11:27:05,632 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 11:27:05,633 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 11:27:05,636 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 11:27:05,636 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 11:27:04" (1/3) ... [2022-11-20 11:27:05,637 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ccb8d31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:27:05, skipping insertion in model container [2022-11-20 11:27:05,637 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:27:05" (2/3) ... [2022-11-20 11:27:05,637 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ccb8d31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:27:05, skipping insertion in model container [2022-11-20 11:27:05,637 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:27:05" (3/3) ... [2022-11-20 11:27:05,638 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product20.cil.c [2022-11-20 11:27:05,657 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 11:27:05,657 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 11:27:05,726 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 11:27:05,732 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@40487020, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 11:27:05,733 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 11:27:05,743 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-20 11:27:05,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 11:27:05,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:27:05,755 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:27:05,755 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:27:05,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:27:05,760 INFO L85 PathProgramCache]: Analyzing trace with hash -1697011403, now seen corresponding path program 1 times [2022-11-20 11:27:05,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:27:05,770 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760868431] [2022-11-20 11:27:05,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:27:05,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:27:05,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:05,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-20 11:27:05,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:05,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 11:27:05,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:05,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:27:05,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:27:05,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760868431] [2022-11-20 11:27:05,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [760868431] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:27:05,987 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:27:05,987 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 11:27:05,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1794374248] [2022-11-20 11:27:05,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:27:05,994 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 11:27:05,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:27:06,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 11:27:06,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:27:06,026 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:27:06,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:27:06,061 INFO L93 Difference]: Finished difference Result 165 states and 222 transitions. [2022-11-20 11:27:06,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 11:27:06,064 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-20 11:27:06,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:27:06,073 INFO L225 Difference]: With dead ends: 165 [2022-11-20 11:27:06,073 INFO L226 Difference]: Without dead ends: 78 [2022-11-20 11:27:06,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:27:06,080 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:27:06,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:27:06,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-20 11:27:06,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-20 11:27:06,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.2881355932203389) internal successors, (76), 65 states have internal predecessors, (76), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 11:27:06,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-11-20 11:27:06,145 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 32 [2022-11-20 11:27:06,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:27:06,146 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-11-20 11:27:06,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:27:06,149 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-11-20 11:27:06,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-20 11:27:06,154 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:27:06,154 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:27:06,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 11:27:06,155 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:27:06,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:27:06,158 INFO L85 PathProgramCache]: Analyzing trace with hash -2086467875, now seen corresponding path program 1 times [2022-11-20 11:27:06,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:27:06,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812670636] [2022-11-20 11:27:06,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:27:06,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:27:06,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 11:27:06,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-20 11:27:06,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,391 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:27:06,391 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:27:06,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812670636] [2022-11-20 11:27:06,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [812670636] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:27:06,392 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:27:06,392 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 11:27:06,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [303273367] [2022-11-20 11:27:06,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:27:06,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:27:06,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:27:06,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:27:06,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:27:06,402 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:27:06,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:27:06,433 INFO L93 Difference]: Finished difference Result 116 states and 146 transitions. [2022-11-20 11:27:06,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:27:06,438 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-20 11:27:06,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:27:06,443 INFO L225 Difference]: With dead ends: 116 [2022-11-20 11:27:06,444 INFO L226 Difference]: Without dead ends: 69 [2022-11-20 11:27:06,445 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:27:06,446 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 17 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:27:06,447 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 150 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:27:06,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-20 11:27:06,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-20 11:27:06,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.3018867924528301) internal successors, (69), 59 states have internal predecessors, (69), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-20 11:27:06,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 87 transitions. [2022-11-20 11:27:06,457 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 87 transitions. Word has length 33 [2022-11-20 11:27:06,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:27:06,458 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 87 transitions. [2022-11-20 11:27:06,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:27:06,458 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 87 transitions. [2022-11-20 11:27:06,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-20 11:27:06,459 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:27:06,459 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:27:06,460 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 11:27:06,460 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:27:06,461 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:27:06,461 INFO L85 PathProgramCache]: Analyzing trace with hash -524286602, now seen corresponding path program 1 times [2022-11-20 11:27:06,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:27:06,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16906018] [2022-11-20 11:27:06,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:27:06,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:27:06,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:27:06,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-20 11:27:06,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,558 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:27:06,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:27:06,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16906018] [2022-11-20 11:27:06,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16906018] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:27:06,559 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:27:06,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 11:27:06,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999096999] [2022-11-20 11:27:06,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:27:06,561 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:27:06,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:27:06,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:27:06,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:27:06,562 INFO L87 Difference]: Start difference. First operand 69 states and 87 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 11:27:06,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:27:06,624 INFO L93 Difference]: Finished difference Result 189 states and 244 transitions. [2022-11-20 11:27:06,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:27:06,625 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-20 11:27:06,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:27:06,627 INFO L225 Difference]: With dead ends: 189 [2022-11-20 11:27:06,627 INFO L226 Difference]: Without dead ends: 128 [2022-11-20 11:27:06,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:27:06,629 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 75 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:27:06,629 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 182 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:27:06,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-11-20 11:27:06,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-11-20 11:27:06,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.3297872340425532) internal successors, (125), 105 states have internal predecessors, (125), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-20 11:27:06,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 161 transitions. [2022-11-20 11:27:06,652 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 161 transitions. Word has length 38 [2022-11-20 11:27:06,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:27:06,652 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 161 transitions. [2022-11-20 11:27:06,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 11:27:06,653 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 161 transitions. [2022-11-20 11:27:06,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-20 11:27:06,654 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:27:06,655 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:27:06,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 11:27:06,655 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:27:06,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:27:06,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1086926627, now seen corresponding path program 1 times [2022-11-20 11:27:06,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:27:06,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076002944] [2022-11-20 11:27:06,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:27:06,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:27:06,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 11:27:06,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 11:27:06,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:27:06,790 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 11:27:06,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:27:06,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076002944] [2022-11-20 11:27:06,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076002944] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:27:06,791 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:27:06,791 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 11:27:06,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [305681675] [2022-11-20 11:27:06,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:27:06,796 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 11:27:06,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:27:06,800 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 11:27:06,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 11:27:06,800 INFO L87 Difference]: Start difference. First operand 125 states and 161 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 11:27:06,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:27:06,931 INFO L93 Difference]: Finished difference Result 218 states and 281 transitions. [2022-11-20 11:27:06,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-20 11:27:06,932 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-20 11:27:06,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:27:06,932 INFO L225 Difference]: With dead ends: 218 [2022-11-20 11:27:06,932 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 11:27:06,933 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-20 11:27:06,935 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 57 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 11:27:06,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 216 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 11:27:06,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 11:27:06,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 11:27:06,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:27:06,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 11:27:06,937 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 41 [2022-11-20 11:27:06,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:27:06,938 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 11:27:06,938 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 11:27:06,938 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 11:27:06,938 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 11:27:06,941 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 11:27:06,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 11:27:06,943 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 11:27:07,332 INFO L902 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 854 861) the Hoare annotation is: true [2022-11-20 11:27:07,332 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 854 861) no Hoare annotation was computed. [2022-11-20 11:27:07,332 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 854 861) no Hoare annotation was computed. [2022-11-20 11:27:07,332 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 813 819) no Hoare annotation was computed. [2022-11-20 11:27:07,332 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 813 819) the Hoare annotation is: true [2022-11-20 11:27:07,333 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: true [2022-11-20 11:27:07,333 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-11-20 11:27:07,333 INFO L899 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2022-11-20 11:27:07,334 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-11-20 11:27:07,338 INFO L895 garLoopResultBuilder]: At program point L543(line 543) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,339 INFO L899 garLoopResultBuilder]: For program point L543-1(line 543) no Hoare annotation was computed. [2022-11-20 11:27:07,339 INFO L899 garLoopResultBuilder]: For program point L927-2(lines 927 931) no Hoare annotation was computed. [2022-11-20 11:27:07,340 INFO L899 garLoopResultBuilder]: For program point L605(line 605) no Hoare annotation was computed. [2022-11-20 11:27:07,341 INFO L895 garLoopResultBuilder]: At program point L498(lines 493 501) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,341 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 786 812) no Hoare annotation was computed. [2022-11-20 11:27:07,343 INFO L899 garLoopResultBuilder]: For program point L800-1(lines 800 806) no Hoare annotation was computed. [2022-11-20 11:27:07,343 INFO L895 garLoopResultBuilder]: At program point L606(lines 601 608) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,343 INFO L899 garLoopResultBuilder]: For program point L829(lines 829 837) no Hoare annotation was computed. [2022-11-20 11:27:07,348 INFO L895 garLoopResultBuilder]: At program point L507(lines 502 510) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,349 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 842) no Hoare annotation was computed. [2022-11-20 11:27:07,349 INFO L895 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,350 INFO L899 garLoopResultBuilder]: For program point L528-1(line 528) no Hoare annotation was computed. [2022-11-20 11:27:07,350 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2022-11-20 11:27:07,350 INFO L895 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,350 INFO L895 garLoopResultBuilder]: At program point L933(lines 918 936) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,351 INFO L899 garLoopResultBuilder]: For program point L545(lines 545 555) no Hoare annotation was computed. [2022-11-20 11:27:07,351 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 558) no Hoare annotation was computed. [2022-11-20 11:27:07,351 INFO L895 garLoopResultBuilder]: At program point L541-1(lines 533 561) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,352 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 799) no Hoare annotation was computed. [2022-11-20 11:27:07,353 INFO L899 garLoopResultBuilder]: For program point L793-2(lines 789 811) no Hoare annotation was computed. [2022-11-20 11:27:07,353 INFO L895 garLoopResultBuilder]: At program point L835(line 835) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,353 INFO L899 garLoopResultBuilder]: For program point L546(lines 546 552) no Hoare annotation was computed. [2022-11-20 11:27:07,353 INFO L895 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-20 11:27:07,354 INFO L895 garLoopResultBuilder]: At program point L530(lines 523 532) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,354 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 786 812) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,354 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 786 812) no Hoare annotation was computed. [2022-11-20 11:27:07,354 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 605) no Hoare annotation was computed. [2022-11-20 11:27:07,357 INFO L895 garLoopResultBuilder]: At program point L840(line 840) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,358 INFO L895 garLoopResultBuilder]: At program point L840-1(lines 821 845) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-20 11:27:07,358 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 612 641) no Hoare annotation was computed. [2022-11-20 11:27:07,358 INFO L902 garLoopResultBuilder]: At program point L637(lines 612 641) the Hoare annotation is: true [2022-11-20 11:27:07,358 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 612 641) the Hoare annotation is: true [2022-11-20 11:27:07,358 INFO L899 garLoopResultBuilder]: For program point L633(line 633) no Hoare annotation was computed. [2022-11-20 11:27:07,358 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 630) no Hoare annotation was computed. [2022-11-20 11:27:07,359 INFO L902 garLoopResultBuilder]: At program point L626-1(lines 626 630) the Hoare annotation is: true [2022-11-20 11:27:07,359 INFO L899 garLoopResultBuilder]: For program point L623(line 623) no Hoare annotation was computed. [2022-11-20 11:27:07,359 INFO L902 garLoopResultBuilder]: At program point L622-2(lines 622 636) the Hoare annotation is: true [2022-11-20 11:27:07,359 INFO L902 garLoopResultBuilder]: At program point L618(line 618) the Hoare annotation is: true [2022-11-20 11:27:07,359 INFO L899 garLoopResultBuilder]: For program point L618-1(line 618) no Hoare annotation was computed. [2022-11-20 11:27:07,359 INFO L895 garLoopResultBuilder]: At program point L671(lines 667 673) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-20 11:27:07,360 INFO L899 garLoopResultBuilder]: For program point L696(lines 696 703) no Hoare annotation was computed. [2022-11-20 11:27:07,360 INFO L899 garLoopResultBuilder]: For program point L696-2(lines 696 703) no Hoare annotation was computed. [2022-11-20 11:27:07,360 INFO L902 garLoopResultBuilder]: At program point L775(lines 712 779) the Hoare annotation is: true [2022-11-20 11:27:07,360 INFO L899 garLoopResultBuilder]: For program point L742(lines 742 748) no Hoare annotation was computed. [2022-11-20 11:27:07,360 INFO L895 garLoopResultBuilder]: At program point L581(lines 577 583) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-20 11:27:07,360 INFO L899 garLoopResultBuilder]: For program point L742-1(lines 742 748) no Hoare annotation was computed. [2022-11-20 11:27:07,361 INFO L902 garLoopResultBuilder]: At program point L705(lines 686 708) the Hoare annotation is: true [2022-11-20 11:27:07,361 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 11:27:07,361 INFO L895 garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,361 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 11:27:07,361 INFO L895 garLoopResultBuilder]: At program point L957(lines 952 959) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,361 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 11:27:07,362 INFO L895 garLoopResultBuilder]: At program point L949(lines 937 951) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,362 INFO L899 garLoopResultBuilder]: For program point L941(lines 941 947) no Hoare annotation was computed. [2022-11-20 11:27:07,362 INFO L899 garLoopResultBuilder]: For program point L941-1(lines 941 947) no Hoare annotation was computed. [2022-11-20 11:27:07,362 INFO L895 garLoopResultBuilder]: At program point L520(lines 515 522) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-20 11:27:07,362 INFO L895 garLoopResultBuilder]: At program point L772(lines 721 773) the Hoare annotation is: false [2022-11-20 11:27:07,362 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 11:27:07,363 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 766) no Hoare annotation was computed. [2022-11-20 11:27:07,363 INFO L895 garLoopResultBuilder]: At program point L760-2(lines 752 767) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,363 INFO L899 garLoopResultBuilder]: For program point L723(lines 722 771) no Hoare annotation was computed. [2022-11-20 11:27:07,363 INFO L899 garLoopResultBuilder]: For program point L752(lines 752 767) no Hoare annotation was computed. [2022-11-20 11:27:07,363 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,363 INFO L895 garLoopResultBuilder]: At program point L769(lines 722 771) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-20 11:27:07,364 INFO L899 garLoopResultBuilder]: For program point L732(lines 732 738) no Hoare annotation was computed. [2022-11-20 11:27:07,364 INFO L899 garLoopResultBuilder]: For program point L732-1(lines 732 738) no Hoare annotation was computed. [2022-11-20 11:27:07,364 INFO L895 garLoopResultBuilder]: At program point L596(lines 591 599) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-20 11:27:07,364 INFO L899 garLoopResultBuilder]: For program point L724(lines 724 728) no Hoare annotation was computed. [2022-11-20 11:27:07,364 INFO L895 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: false [2022-11-20 11:27:07,364 INFO L895 garLoopResultBuilder]: At program point L588(lines 584 590) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-20 11:27:07,365 INFO L902 garLoopResultBuilder]: At program point L683(lines 675 685) the Hoare annotation is: true [2022-11-20 11:27:07,365 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-11-20 11:27:07,365 INFO L899 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2022-11-20 11:27:07,365 INFO L902 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: true [2022-11-20 11:27:07,365 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 873 881) no Hoare annotation was computed. [2022-11-20 11:27:07,365 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 873 881) the Hoare annotation is: true [2022-11-20 11:27:07,365 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 873 881) no Hoare annotation was computed. [2022-11-20 11:27:07,369 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-11-20 11:27:07,371 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 11:27:07,386 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 11:27:07 BoogieIcfgContainer [2022-11-20 11:27:07,386 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 11:27:07,387 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 11:27:07,387 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 11:27:07,388 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 11:27:07,389 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:27:05" (3/4) ... [2022-11-20 11:27:07,392 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 11:27:07,399 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 11:27:07,399 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 11:27:07,399 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 11:27:07,399 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 11:27:07,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 11:27:07,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 11:27:07,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-20 11:27:07,406 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2022-11-20 11:27:07,406 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 11:27:07,407 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 11:27:07,407 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:27:07,408 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:27:07,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-20 11:27:07,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-20 11:27:07,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-20 11:27:07,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-20 11:27:07,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-20 11:27:07,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-20 11:27:07,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-20 11:27:07,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-20 11:27:07,459 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 11:27:07,459 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 11:27:07,459 INFO L158 Benchmark]: Toolchain (without parser) took 2927.00ms. Allocated memory is still 148.9MB. Free memory was 109.5MB in the beginning and 67.1MB in the end (delta: 42.4MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,460 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 113.2MB. Free memory is still 81.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 11:27:07,460 INFO L158 Benchmark]: CACSL2BoogieTranslator took 572.06ms. Allocated memory is still 148.9MB. Free memory was 109.5MB in the beginning and 106.6MB in the end (delta: 2.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,460 INFO L158 Benchmark]: Boogie Procedure Inliner took 74.36ms. Allocated memory is still 148.9MB. Free memory was 106.6MB in the beginning and 104.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,461 INFO L158 Benchmark]: Boogie Preprocessor took 47.31ms. Allocated memory is still 148.9MB. Free memory was 104.6MB in the beginning and 102.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,461 INFO L158 Benchmark]: RCFGBuilder took 400.44ms. Allocated memory is still 148.9MB. Free memory was 102.9MB in the beginning and 87.0MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,462 INFO L158 Benchmark]: TraceAbstraction took 1754.13ms. Allocated memory is still 148.9MB. Free memory was 86.1MB in the beginning and 72.6MB in the end (delta: 13.5MB). Peak memory consumption was 16.1MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,462 INFO L158 Benchmark]: Witness Printer took 71.83ms. Allocated memory is still 148.9MB. Free memory was 72.6MB in the beginning and 67.1MB in the end (delta: 5.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 11:27:07,464 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 113.2MB. Free memory is still 81.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 572.06ms. Allocated memory is still 148.9MB. Free memory was 109.5MB in the beginning and 106.6MB in the end (delta: 2.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 74.36ms. Allocated memory is still 148.9MB. Free memory was 106.6MB in the beginning and 104.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.31ms. Allocated memory is still 148.9MB. Free memory was 104.6MB in the beginning and 102.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 400.44ms. Allocated memory is still 148.9MB. Free memory was 102.9MB in the beginning and 87.0MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 1754.13ms. Allocated memory is still 148.9MB. Free memory was 86.1MB in the beginning and 72.6MB in the end (delta: 13.5MB). Peak memory consumption was 16.1MB. Max. memory is 16.1GB. * Witness Printer took 71.83ms. Allocated memory is still 148.9MB. Free memory was 72.6MB in the beginning and 67.1MB in the end (delta: 5.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 605]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 155 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 149 mSDsluCounter, 656 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 295 mSDsCounter, 5 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 42 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5 mSolverCounterUnsat, 361 mSDtfsCounter, 42 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 32 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=125occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 213 PreInvPairs, 239 NumberOfFragments, 183 HoareAnnotationTreeSize, 213 FomulaSimplifications, 8 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 40 FomulaSimplificationsInter, 310 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 144 NumberOfCodeBlocks, 144 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 140 ConstructedInterpolants, 0 QuantifiedInterpolants, 178 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 12/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 712]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 584]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 601]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) RESULT: Ultimate proved your program to be correct! [2022-11-20 11:27:07,493 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b7d6d835-cb97-4db0-b717-2e05377ed2be/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE