./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 61c2d7b2f53adc3803e4e62ab44daa78f4a9bdf9ba37b58d516bb40a6cc23cc6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 16:09:59,921 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 16:09:59,923 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 16:09:59,960 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 16:09:59,960 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 16:09:59,965 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 16:09:59,968 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 16:09:59,973 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 16:09:59,975 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 16:09:59,985 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 16:09:59,987 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 16:09:59,988 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 16:09:59,988 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 16:09:59,989 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 16:09:59,990 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 16:09:59,992 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 16:09:59,993 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 16:09:59,995 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 16:09:59,997 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 16:09:59,999 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 16:10:00,001 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 16:10:00,003 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 16:10:00,005 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 16:10:00,006 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 16:10:00,011 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 16:10:00,011 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 16:10:00,012 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 16:10:00,013 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 16:10:00,014 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 16:10:00,015 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 16:10:00,016 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 16:10:00,017 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 16:10:00,018 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 16:10:00,019 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 16:10:00,021 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 16:10:00,021 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 16:10:00,022 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 16:10:00,023 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 16:10:00,023 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 16:10:00,025 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 16:10:00,026 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 16:10:00,027 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-21 16:10:00,058 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 16:10:00,058 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 16:10:00,059 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-21 16:10:00,059 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-21 16:10:00,060 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-21 16:10:00,061 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-21 16:10:00,062 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 16:10:00,062 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 16:10:00,062 INFO L138 SettingsManager]: * Use SBE=true [2022-11-21 16:10:00,063 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 16:10:00,063 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-21 16:10:00,064 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 16:10:00,064 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-21 16:10:00,064 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 16:10:00,065 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-21 16:10:00,065 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-21 16:10:00,066 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-21 16:10:00,066 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-21 16:10:00,066 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 16:10:00,067 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 16:10:00,067 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-21 16:10:00,068 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 16:10:00,068 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-21 16:10:00,068 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-21 16:10:00,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 16:10:00,069 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 16:10:00,069 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-21 16:10:00,070 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-21 16:10:00,070 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-21 16:10:00,071 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-21 16:10:00,071 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-21 16:10:00,071 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-21 16:10:00,072 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-21 16:10:00,072 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 61c2d7b2f53adc3803e4e62ab44daa78f4a9bdf9ba37b58d516bb40a6cc23cc6 [2022-11-21 16:10:00,391 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 16:10:00,421 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 16:10:00,426 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 16:10:00,429 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 16:10:00,429 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 16:10:00,431 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/../../sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c [2022-11-21 16:10:03,926 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 16:10:04,335 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 16:10:04,347 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c [2022-11-21 16:10:04,366 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/data/4a5120515/bab6ccb8345845c8a913a0298b306abe/FLAG4e8d53f96 [2022-11-21 16:10:04,391 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/data/4a5120515/bab6ccb8345845c8a913a0298b306abe [2022-11-21 16:10:04,396 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 16:10:04,401 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 16:10:04,406 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 16:10:04,406 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 16:10:04,410 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 16:10:04,411 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 04:10:04" (1/1) ... [2022-11-21 16:10:04,413 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d0a8db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:04, skipping insertion in model container [2022-11-21 16:10:04,413 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 04:10:04" (1/1) ... [2022-11-21 16:10:04,423 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 16:10:04,477 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 16:10:04,784 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c[13937,13950] [2022-11-21 16:10:04,837 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 16:10:04,854 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 16:10:04,973 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/sv-benchmarks/c/product-lines/minepump_spec5_product20.cil.c[13937,13950] [2022-11-21 16:10:04,988 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 16:10:05,011 INFO L208 MainTranslator]: Completed translation [2022-11-21 16:10:05,012 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05 WrapperNode [2022-11-21 16:10:05,012 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 16:10:05,013 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 16:10:05,014 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 16:10:05,014 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 16:10:05,024 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,040 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,070 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 23, calls inlined = 19, statements flattened = 174 [2022-11-21 16:10:05,071 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 16:10:05,072 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 16:10:05,072 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 16:10:05,073 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 16:10:05,084 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,085 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,088 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,088 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,094 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,101 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,103 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,104 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,107 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 16:10:05,109 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 16:10:05,117 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 16:10:05,117 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 16:10:05,118 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (1/1) ... [2022-11-21 16:10:05,142 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 16:10:05,159 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 16:10:05,176 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-21 16:10:05,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-21 16:10:05,223 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 16:10:05,224 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-21 16:10:05,224 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-21 16:10:05,224 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-21 16:10:05,224 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-21 16:10:05,225 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-21 16:10:05,225 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-21 16:10:05,225 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-21 16:10:05,226 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-21 16:10:05,227 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-21 16:10:05,227 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-21 16:10:05,227 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-21 16:10:05,227 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-21 16:10:05,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 16:10:05,228 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-21 16:10:05,234 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-21 16:10:05,236 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 16:10:05,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 16:10:05,369 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 16:10:05,372 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 16:10:05,789 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 16:10:05,798 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 16:10:05,798 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-21 16:10:05,801 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:10:05 BoogieIcfgContainer [2022-11-21 16:10:05,802 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 16:10:05,805 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-21 16:10:05,805 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-21 16:10:05,809 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-21 16:10:05,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 04:10:04" (1/3) ... [2022-11-21 16:10:05,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bc81cef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 04:10:05, skipping insertion in model container [2022-11-21 16:10:05,811 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:10:05" (2/3) ... [2022-11-21 16:10:05,811 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bc81cef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 04:10:05, skipping insertion in model container [2022-11-21 16:10:05,811 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:10:05" (3/3) ... [2022-11-21 16:10:05,813 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product20.cil.c [2022-11-21 16:10:05,836 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-21 16:10:05,837 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-21 16:10:05,900 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-21 16:10:05,909 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@669b09df, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-21 16:10:05,909 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-21 16:10:05,915 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-21 16:10:05,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-21 16:10:05,928 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:10:05,929 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:10:05,930 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:10:05,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:10:05,937 INFO L85 PathProgramCache]: Analyzing trace with hash -1697011403, now seen corresponding path program 1 times [2022-11-21 16:10:05,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:10:05,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1216172695] [2022-11-21 16:10:05,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:10:05,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:10:06,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-21 16:10:06,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:10:06,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,240 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 16:10:06,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:10:06,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1216172695] [2022-11-21 16:10:06,242 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1216172695] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:10:06,242 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:10:06,242 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-21 16:10:06,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [638154451] [2022-11-21 16:10:06,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:10:06,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-21 16:10:06,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:10:06,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-21 16:10:06,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 16:10:06,309 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 16:10:06,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:10:06,352 INFO L93 Difference]: Finished difference Result 165 states and 222 transitions. [2022-11-21 16:10:06,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-21 16:10:06,355 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-21 16:10:06,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:10:06,366 INFO L225 Difference]: With dead ends: 165 [2022-11-21 16:10:06,366 INFO L226 Difference]: Without dead ends: 78 [2022-11-21 16:10:06,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 16:10:06,375 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:10:06,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:10:06,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-21 16:10:06,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-21 16:10:06,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.2881355932203389) internal successors, (76), 65 states have internal predecessors, (76), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-21 16:10:06,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-11-21 16:10:06,429 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 32 [2022-11-21 16:10:06,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:10:06,430 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-11-21 16:10:06,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 16:10:06,431 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-11-21 16:10:06,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-21 16:10:06,434 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:10:06,434 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:10:06,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-21 16:10:06,435 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:10:06,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:10:06,436 INFO L85 PathProgramCache]: Analyzing trace with hash -2086467875, now seen corresponding path program 1 times [2022-11-21 16:10:06,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:10:06,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [85251507] [2022-11-21 16:10:06,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:10:06,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:10:06,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-21 16:10:06,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-21 16:10:06,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,586 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 16:10:06,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:10:06,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [85251507] [2022-11-21 16:10:06,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [85251507] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:10:06,588 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:10:06,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 16:10:06,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634417377] [2022-11-21 16:10:06,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:10:06,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 16:10:06,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:10:06,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 16:10:06,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:10:06,592 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 16:10:06,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:10:06,617 INFO L93 Difference]: Finished difference Result 116 states and 146 transitions. [2022-11-21 16:10:06,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 16:10:06,618 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-21 16:10:06,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:10:06,619 INFO L225 Difference]: With dead ends: 116 [2022-11-21 16:10:06,620 INFO L226 Difference]: Without dead ends: 69 [2022-11-21 16:10:06,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:10:06,623 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 17 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:10:06,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 150 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:10:06,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-21 16:10:06,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-21 16:10:06,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.3018867924528301) internal successors, (69), 59 states have internal predecessors, (69), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-21 16:10:06,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 87 transitions. [2022-11-21 16:10:06,638 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 87 transitions. Word has length 33 [2022-11-21 16:10:06,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:10:06,639 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 87 transitions. [2022-11-21 16:10:06,639 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 16:10:06,640 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 87 transitions. [2022-11-21 16:10:06,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-21 16:10:06,642 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:10:06,642 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:10:06,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-21 16:10:06,643 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:10:06,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:10:06,644 INFO L85 PathProgramCache]: Analyzing trace with hash -524286602, now seen corresponding path program 1 times [2022-11-21 16:10:06,644 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:10:06,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746877121] [2022-11-21 16:10:06,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:10:06,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:10:06,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 16:10:06,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-21 16:10:06,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:06,801 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 16:10:06,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:10:06,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746877121] [2022-11-21 16:10:06,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746877121] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:10:06,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:10:06,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 16:10:06,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1149367638] [2022-11-21 16:10:06,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:10:06,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 16:10:06,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:10:06,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 16:10:06,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:10:06,810 INFO L87 Difference]: Start difference. First operand 69 states and 87 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-21 16:10:06,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:10:06,904 INFO L93 Difference]: Finished difference Result 189 states and 244 transitions. [2022-11-21 16:10:06,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 16:10:06,906 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-21 16:10:06,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:10:06,911 INFO L225 Difference]: With dead ends: 189 [2022-11-21 16:10:06,912 INFO L226 Difference]: Without dead ends: 128 [2022-11-21 16:10:06,916 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:10:06,917 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 75 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:10:06,920 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 182 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:10:06,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-11-21 16:10:06,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-11-21 16:10:06,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.3297872340425532) internal successors, (125), 105 states have internal predecessors, (125), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-21 16:10:06,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 161 transitions. [2022-11-21 16:10:06,961 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 161 transitions. Word has length 38 [2022-11-21 16:10:06,962 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:10:06,962 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 161 transitions. [2022-11-21 16:10:06,962 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-21 16:10:06,963 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 161 transitions. [2022-11-21 16:10:06,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-21 16:10:06,965 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:10:06,965 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:10:06,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-21 16:10:06,966 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:10:06,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:10:06,967 INFO L85 PathProgramCache]: Analyzing trace with hash -1086926627, now seen corresponding path program 1 times [2022-11-21 16:10:06,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:10:06,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [869129618] [2022-11-21 16:10:06,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:10:06,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:10:07,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:07,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-21 16:10:07,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:07,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-21 16:10:07,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:10:07,288 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-21 16:10:07,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:10:07,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [869129618] [2022-11-21 16:10:07,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [869129618] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:10:07,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:10:07,290 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 16:10:07,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438612375] [2022-11-21 16:10:07,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:10:07,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 16:10:07,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:10:07,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 16:10:07,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-21 16:10:07,293 INFO L87 Difference]: Start difference. First operand 125 states and 161 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-21 16:10:07,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:10:07,408 INFO L93 Difference]: Finished difference Result 218 states and 281 transitions. [2022-11-21 16:10:07,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-21 16:10:07,409 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-21 16:10:07,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:10:07,410 INFO L225 Difference]: With dead ends: 218 [2022-11-21 16:10:07,410 INFO L226 Difference]: Without dead ends: 0 [2022-11-21 16:10:07,412 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-21 16:10:07,413 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 57 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-21 16:10:07,414 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 216 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-21 16:10:07,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-21 16:10:07,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-21 16:10:07,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 16:10:07,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-21 16:10:07,417 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 41 [2022-11-21 16:10:07,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:10:07,417 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-21 16:10:07,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-21 16:10:07,418 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-21 16:10:07,418 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-21 16:10:07,421 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-21 16:10:07,422 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-21 16:10:07,425 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-21 16:10:07,871 INFO L902 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 854 861) the Hoare annotation is: true [2022-11-21 16:10:07,872 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 854 861) no Hoare annotation was computed. [2022-11-21 16:10:07,872 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 854 861) no Hoare annotation was computed. [2022-11-21 16:10:07,872 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 813 819) no Hoare annotation was computed. [2022-11-21 16:10:07,873 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 813 819) the Hoare annotation is: true [2022-11-21 16:10:07,874 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 449 460) the Hoare annotation is: true [2022-11-21 16:10:07,874 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2022-11-21 16:10:07,875 INFO L899 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2022-11-21 16:10:07,876 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-11-21 16:10:07,880 INFO L895 garLoopResultBuilder]: At program point L543(line 543) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,881 INFO L899 garLoopResultBuilder]: For program point L543-1(line 543) no Hoare annotation was computed. [2022-11-21 16:10:07,881 INFO L899 garLoopResultBuilder]: For program point L927-2(lines 927 931) no Hoare annotation was computed. [2022-11-21 16:10:07,881 INFO L899 garLoopResultBuilder]: For program point L605(line 605) no Hoare annotation was computed. [2022-11-21 16:10:07,882 INFO L895 garLoopResultBuilder]: At program point L498(lines 493 501) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,883 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 786 812) no Hoare annotation was computed. [2022-11-21 16:10:07,886 INFO L899 garLoopResultBuilder]: For program point L800-1(lines 800 806) no Hoare annotation was computed. [2022-11-21 16:10:07,886 INFO L895 garLoopResultBuilder]: At program point L606(lines 601 608) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,887 INFO L899 garLoopResultBuilder]: For program point L829(lines 829 837) no Hoare annotation was computed. [2022-11-21 16:10:07,894 INFO L895 garLoopResultBuilder]: At program point L507(lines 502 510) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,895 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 842) no Hoare annotation was computed. [2022-11-21 16:10:07,895 INFO L895 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,896 INFO L899 garLoopResultBuilder]: For program point L528-1(line 528) no Hoare annotation was computed. [2022-11-21 16:10:07,896 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2022-11-21 16:10:07,896 INFO L895 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,897 INFO L895 garLoopResultBuilder]: At program point L933(lines 918 936) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,897 INFO L899 garLoopResultBuilder]: For program point L545(lines 545 555) no Hoare annotation was computed. [2022-11-21 16:10:07,897 INFO L899 garLoopResultBuilder]: For program point L541(lines 541 558) no Hoare annotation was computed. [2022-11-21 16:10:07,898 INFO L895 garLoopResultBuilder]: At program point L541-1(lines 533 561) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,898 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 799) no Hoare annotation was computed. [2022-11-21 16:10:07,898 INFO L899 garLoopResultBuilder]: For program point L793-2(lines 789 811) no Hoare annotation was computed. [2022-11-21 16:10:07,898 INFO L895 garLoopResultBuilder]: At program point L835(line 835) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,899 INFO L899 garLoopResultBuilder]: For program point L546(lines 546 552) no Hoare annotation was computed. [2022-11-21 16:10:07,899 INFO L895 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-21 16:10:07,899 INFO L895 garLoopResultBuilder]: At program point L530(lines 523 532) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,900 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 786 812) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,900 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 786 812) no Hoare annotation was computed. [2022-11-21 16:10:07,900 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 605) no Hoare annotation was computed. [2022-11-21 16:10:07,903 INFO L895 garLoopResultBuilder]: At program point L840(line 840) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,906 INFO L895 garLoopResultBuilder]: At program point L840-1(lines 821 845) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-21 16:10:07,906 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 612 641) no Hoare annotation was computed. [2022-11-21 16:10:07,906 INFO L902 garLoopResultBuilder]: At program point L637(lines 612 641) the Hoare annotation is: true [2022-11-21 16:10:07,906 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 612 641) the Hoare annotation is: true [2022-11-21 16:10:07,907 INFO L899 garLoopResultBuilder]: For program point L633(line 633) no Hoare annotation was computed. [2022-11-21 16:10:07,907 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 630) no Hoare annotation was computed. [2022-11-21 16:10:07,908 INFO L902 garLoopResultBuilder]: At program point L626-1(lines 626 630) the Hoare annotation is: true [2022-11-21 16:10:07,908 INFO L899 garLoopResultBuilder]: For program point L623(line 623) no Hoare annotation was computed. [2022-11-21 16:10:07,908 INFO L902 garLoopResultBuilder]: At program point L622-2(lines 622 636) the Hoare annotation is: true [2022-11-21 16:10:07,908 INFO L902 garLoopResultBuilder]: At program point L618(line 618) the Hoare annotation is: true [2022-11-21 16:10:07,909 INFO L899 garLoopResultBuilder]: For program point L618-1(line 618) no Hoare annotation was computed. [2022-11-21 16:10:07,909 INFO L895 garLoopResultBuilder]: At program point L671(lines 667 673) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-21 16:10:07,909 INFO L899 garLoopResultBuilder]: For program point L696(lines 696 703) no Hoare annotation was computed. [2022-11-21 16:10:07,909 INFO L899 garLoopResultBuilder]: For program point L696-2(lines 696 703) no Hoare annotation was computed. [2022-11-21 16:10:07,910 INFO L902 garLoopResultBuilder]: At program point L775(lines 712 779) the Hoare annotation is: true [2022-11-21 16:10:07,910 INFO L899 garLoopResultBuilder]: For program point L742(lines 742 748) no Hoare annotation was computed. [2022-11-21 16:10:07,910 INFO L895 garLoopResultBuilder]: At program point L581(lines 577 583) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-21 16:10:07,910 INFO L899 garLoopResultBuilder]: For program point L742-1(lines 742 748) no Hoare annotation was computed. [2022-11-21 16:10:07,911 INFO L902 garLoopResultBuilder]: At program point L705(lines 686 708) the Hoare annotation is: true [2022-11-21 16:10:07,912 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-21 16:10:07,912 INFO L895 garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,912 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-21 16:10:07,913 INFO L895 garLoopResultBuilder]: At program point L957(lines 952 959) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,913 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-21 16:10:07,913 INFO L895 garLoopResultBuilder]: At program point L949(lines 937 951) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,913 INFO L899 garLoopResultBuilder]: For program point L941(lines 941 947) no Hoare annotation was computed. [2022-11-21 16:10:07,914 INFO L899 garLoopResultBuilder]: For program point L941-1(lines 941 947) no Hoare annotation was computed. [2022-11-21 16:10:07,914 INFO L895 garLoopResultBuilder]: At program point L520(lines 515 522) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-21 16:10:07,914 INFO L895 garLoopResultBuilder]: At program point L772(lines 721 773) the Hoare annotation is: false [2022-11-21 16:10:07,914 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-21 16:10:07,915 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 766) no Hoare annotation was computed. [2022-11-21 16:10:07,915 INFO L895 garLoopResultBuilder]: At program point L760-2(lines 752 767) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,915 INFO L899 garLoopResultBuilder]: For program point L723(lines 722 771) no Hoare annotation was computed. [2022-11-21 16:10:07,916 INFO L899 garLoopResultBuilder]: For program point L752(lines 752 767) no Hoare annotation was computed. [2022-11-21 16:10:07,916 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,917 INFO L895 garLoopResultBuilder]: At program point L769(lines 722 771) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-21 16:10:07,917 INFO L899 garLoopResultBuilder]: For program point L732(lines 732 738) no Hoare annotation was computed. [2022-11-21 16:10:07,917 INFO L899 garLoopResultBuilder]: For program point L732-1(lines 732 738) no Hoare annotation was computed. [2022-11-21 16:10:07,918 INFO L895 garLoopResultBuilder]: At program point L596(lines 591 599) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-21 16:10:07,918 INFO L899 garLoopResultBuilder]: For program point L724(lines 724 728) no Hoare annotation was computed. [2022-11-21 16:10:07,919 INFO L895 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: false [2022-11-21 16:10:07,919 INFO L895 garLoopResultBuilder]: At program point L588(lines 584 590) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-21 16:10:07,921 INFO L902 garLoopResultBuilder]: At program point L683(lines 675 685) the Hoare annotation is: true [2022-11-21 16:10:07,921 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2022-11-21 16:10:07,922 INFO L899 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2022-11-21 16:10:07,922 INFO L902 garLoopResultBuilder]: At program point waterRiseENTRY(lines 437 448) the Hoare annotation is: true [2022-11-21 16:10:07,922 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 873 881) no Hoare annotation was computed. [2022-11-21 16:10:07,922 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 873 881) the Hoare annotation is: true [2022-11-21 16:10:07,923 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 873 881) no Hoare annotation was computed. [2022-11-21 16:10:07,927 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-11-21 16:10:07,930 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-21 16:10:07,963 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 04:10:07 BoogieIcfgContainer [2022-11-21 16:10:07,963 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-21 16:10:07,964 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-21 16:10:07,964 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-21 16:10:07,965 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-21 16:10:07,965 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:10:05" (3/4) ... [2022-11-21 16:10:07,969 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-21 16:10:07,977 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-21 16:10:07,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-21 16:10:07,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-21 16:10:07,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-21 16:10:07,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-21 16:10:07,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-21 16:10:07,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-21 16:10:07,990 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2022-11-21 16:10:07,991 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-21 16:10:07,991 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-21 16:10:07,992 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 16:10:07,992 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 16:10:08,032 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-21 16:10:08,033 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-21 16:10:08,035 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-21 16:10:08,035 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-21 16:10:08,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-21 16:10:08,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-21 16:10:08,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-21 16:10:08,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-21 16:10:08,105 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/witness.graphml [2022-11-21 16:10:08,106 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-21 16:10:08,107 INFO L158 Benchmark]: Toolchain (without parser) took 3705.31ms. Allocated memory is still 192.9MB. Free memory was 146.8MB in the beginning and 161.1MB in the end (delta: -14.3MB). Peak memory consumption was 89.7MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,107 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 134.2MB. Free memory is still 77.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 16:10:08,108 INFO L158 Benchmark]: CACSL2BoogieTranslator took 607.05ms. Allocated memory is still 192.9MB. Free memory was 146.3MB in the beginning and 128.0MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,108 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.85ms. Allocated memory is still 192.9MB. Free memory was 128.0MB in the beginning and 125.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,108 INFO L158 Benchmark]: Boogie Preprocessor took 35.68ms. Allocated memory is still 192.9MB. Free memory was 125.9MB in the beginning and 124.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,112 INFO L158 Benchmark]: RCFGBuilder took 693.13ms. Allocated memory is still 192.9MB. Free memory was 124.2MB in the beginning and 161.3MB in the end (delta: -37.1MB). Peak memory consumption was 20.5MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,112 INFO L158 Benchmark]: TraceAbstraction took 2158.72ms. Allocated memory is still 192.9MB. Free memory was 160.3MB in the beginning and 67.0MB in the end (delta: 93.3MB). Peak memory consumption was 92.3MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,113 INFO L158 Benchmark]: Witness Printer took 141.87ms. Allocated memory is still 192.9MB. Free memory was 67.0MB in the beginning and 161.1MB in the end (delta: -94.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-21 16:10:08,116 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 134.2MB. Free memory is still 77.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 607.05ms. Allocated memory is still 192.9MB. Free memory was 146.3MB in the beginning and 128.0MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.85ms. Allocated memory is still 192.9MB. Free memory was 128.0MB in the beginning and 125.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.68ms. Allocated memory is still 192.9MB. Free memory was 125.9MB in the beginning and 124.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 693.13ms. Allocated memory is still 192.9MB. Free memory was 124.2MB in the beginning and 161.3MB in the end (delta: -37.1MB). Peak memory consumption was 20.5MB. Max. memory is 16.1GB. * TraceAbstraction took 2158.72ms. Allocated memory is still 192.9MB. Free memory was 160.3MB in the beginning and 67.0MB in the end (delta: 93.3MB). Peak memory consumption was 92.3MB. Max. memory is 16.1GB. * Witness Printer took 141.87ms. Allocated memory is still 192.9MB. Free memory was 67.0MB in the beginning and 161.1MB in the end (delta: -94.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 605]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.0s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 155 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 149 mSDsluCounter, 656 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 295 mSDsCounter, 5 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 42 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5 mSolverCounterUnsat, 361 mSDtfsCounter, 42 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 32 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=125occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 213 PreInvPairs, 239 NumberOfFragments, 183 HoareAnnotationTreeSize, 213 FomulaSimplifications, 8 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 40 FomulaSimplificationsInter, 310 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 144 NumberOfCodeBlocks, 144 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 140 ConstructedInterpolants, 0 QuantifiedInterpolants, 178 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 12/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 712]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 584]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 601]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) RESULT: Ultimate proved your program to be correct! [2022-11-21 16:10:08,178 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d50da226-ed54-4b04-a2ac-10c7012b3bea/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE