./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bda183060f847dd51d7e0728c1fd62bc6790c04aa5197b907e94467526762377 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 18:10:50,979 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 18:10:50,981 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 18:10:51,023 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 18:10:51,024 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 18:10:51,028 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 18:10:51,030 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 18:10:51,033 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 18:10:51,035 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 18:10:51,041 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 18:10:51,042 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 18:10:51,043 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 18:10:51,043 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 18:10:51,044 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 18:10:51,045 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 18:10:51,046 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 18:10:51,047 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 18:10:51,048 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 18:10:51,049 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 18:10:51,058 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 18:10:51,061 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 18:10:51,063 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 18:10:51,065 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 18:10:51,066 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 18:10:51,076 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 18:10:51,076 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 18:10:51,077 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 18:10:51,079 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 18:10:51,079 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 18:10:51,080 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 18:10:51,081 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 18:10:51,082 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 18:10:51,084 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 18:10:51,084 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 18:10:51,087 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 18:10:51,087 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 18:10:51,088 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 18:10:51,088 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 18:10:51,088 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 18:10:51,090 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 18:10:51,091 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 18:10:51,091 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 18:10:51,135 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 18:10:51,135 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 18:10:51,136 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 18:10:51,136 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 18:10:51,137 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 18:10:51,137 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 18:10:51,138 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 18:10:51,138 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 18:10:51,138 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 18:10:51,139 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 18:10:51,140 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 18:10:51,140 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 18:10:51,140 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 18:10:51,140 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 18:10:51,141 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 18:10:51,142 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 18:10:51,142 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 18:10:51,142 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 18:10:51,142 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 18:10:51,143 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:10:51,143 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 18:10:51,143 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 18:10:51,143 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 18:10:51,143 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 18:10:51,144 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 18:10:51,144 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 18:10:51,144 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 18:10:51,144 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 18:10:51,145 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 18:10:51,145 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bda183060f847dd51d7e0728c1fd62bc6790c04aa5197b907e94467526762377 [2022-11-25 18:10:51,423 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 18:10:51,458 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 18:10:51,461 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 18:10:51,462 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 18:10:51,463 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 18:10:51,464 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c [2022-11-25 18:10:54,519 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 18:10:54,821 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 18:10:54,822 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c [2022-11-25 18:10:54,835 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/data/e772f80e5/6e2bc71faaac48dd80aa20672690f786/FLAG8a783f48f [2022-11-25 18:10:54,851 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/data/e772f80e5/6e2bc71faaac48dd80aa20672690f786 [2022-11-25 18:10:54,854 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 18:10:54,855 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 18:10:54,857 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 18:10:54,857 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 18:10:54,860 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 18:10:54,861 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:10:54" (1/1) ... [2022-11-25 18:10:54,862 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@678a2708 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:54, skipping insertion in model container [2022-11-25 18:10:54,863 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:10:54" (1/1) ... [2022-11-25 18:10:54,871 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 18:10:54,910 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 18:10:55,090 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c[2627,2640] [2022-11-25 18:10:55,261 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:10:55,272 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 18:10:55,291 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/sv-benchmarks/c/product-lines/minepump_spec2_product31.cil.c[2627,2640] [2022-11-25 18:10:55,340 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:10:55,358 INFO L208 MainTranslator]: Completed translation [2022-11-25 18:10:55,359 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55 WrapperNode [2022-11-25 18:10:55,359 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 18:10:55,360 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 18:10:55,360 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 18:10:55,360 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 18:10:55,368 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,382 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,420 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 179 [2022-11-25 18:10:55,420 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 18:10:55,421 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 18:10:55,421 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 18:10:55,421 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 18:10:55,436 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,436 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,439 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,439 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,458 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,463 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,465 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,466 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,469 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 18:10:55,470 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 18:10:55,470 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 18:10:55,470 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 18:10:55,471 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (1/1) ... [2022-11-25 18:10:55,478 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:10:55,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:10:55,512 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 18:10:55,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 18:10:55,553 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 18:10:55,553 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 18:10:55,553 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 18:10:55,554 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-25 18:10:55,554 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-25 18:10:55,554 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 18:10:55,554 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 18:10:55,554 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 18:10:55,555 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 18:10:55,555 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 18:10:55,555 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 18:10:55,555 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:10:55,555 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:10:55,555 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-25 18:10:55,555 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-25 18:10:55,556 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-25 18:10:55,556 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-25 18:10:55,556 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 18:10:55,556 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 18:10:55,556 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 18:10:55,556 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 18:10:55,556 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 18:10:55,639 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 18:10:55,641 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 18:10:55,939 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 18:10:55,947 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 18:10:55,948 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 18:10:55,950 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:10:55 BoogieIcfgContainer [2022-11-25 18:10:55,950 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 18:10:55,953 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 18:10:55,953 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 18:10:55,957 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 18:10:55,957 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 06:10:54" (1/3) ... [2022-11-25 18:10:55,958 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a15219c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:10:55, skipping insertion in model container [2022-11-25 18:10:55,958 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:10:55" (2/3) ... [2022-11-25 18:10:55,958 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a15219c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:10:55, skipping insertion in model container [2022-11-25 18:10:55,959 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:10:55" (3/3) ... [2022-11-25 18:10:55,960 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product31.cil.c [2022-11-25 18:10:55,982 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 18:10:55,982 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 18:10:56,081 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 18:10:56,089 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6a68ba48, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 18:10:56,089 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 18:10:56,095 INFO L276 IsEmpty]: Start isEmpty. Operand has 97 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 79 states have internal predecessors, (96), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 12 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-25 18:10:56,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 18:10:56,107 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:10:56,108 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:10:56,109 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:10:56,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:10:56,116 INFO L85 PathProgramCache]: Analyzing trace with hash -255252744, now seen corresponding path program 1 times [2022-11-25 18:10:56,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:10:56,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379982458] [2022-11-25 18:10:56,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:10:56,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:10:56,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:56,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 18:10:56,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:56,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:10:56,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:10:56,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379982458] [2022-11-25 18:10:56,427 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379982458] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:10:56,427 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:10:56,427 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 18:10:56,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231597786] [2022-11-25 18:10:56,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:10:56,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 18:10:56,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:10:56,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 18:10:56,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:10:56,491 INFO L87 Difference]: Start difference. First operand has 97 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 79 states have internal predecessors, (96), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 12 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:56,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:10:56,581 INFO L93 Difference]: Finished difference Result 185 states and 250 transitions. [2022-11-25 18:10:56,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 18:10:56,584 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-25 18:10:56,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:10:56,594 INFO L225 Difference]: With dead ends: 185 [2022-11-25 18:10:56,599 INFO L226 Difference]: Without dead ends: 88 [2022-11-25 18:10:56,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:10:56,627 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:10:56,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:10:56,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-11-25 18:10:56,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-11-25 18:10:56,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 63 states have (on average 1.3015873015873016) internal successors, (82), 71 states have internal predecessors, (82), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-25 18:10:56,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 113 transitions. [2022-11-25 18:10:56,682 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 113 transitions. Word has length 25 [2022-11-25 18:10:56,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:10:56,683 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 113 transitions. [2022-11-25 18:10:56,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:56,688 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2022-11-25 18:10:56,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 18:10:56,691 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:10:56,691 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:10:56,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 18:10:56,692 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:10:56,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:10:56,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1869248240, now seen corresponding path program 1 times [2022-11-25 18:10:56,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:10:56,694 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932462653] [2022-11-25 18:10:56,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:10:56,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:10:56,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:56,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-25 18:10:56,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:56,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:10:56,802 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:10:56,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932462653] [2022-11-25 18:10:56,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932462653] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:10:56,803 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:10:56,803 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:10:56,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [123186473] [2022-11-25 18:10:56,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:10:56,805 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 18:10:56,805 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:10:56,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:10:56,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:10:56,806 INFO L87 Difference]: Start difference. First operand 88 states and 113 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:56,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:10:56,846 INFO L93 Difference]: Finished difference Result 137 states and 175 transitions. [2022-11-25 18:10:56,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:10:56,847 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-25 18:10:56,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:10:56,848 INFO L225 Difference]: With dead ends: 137 [2022-11-25 18:10:56,848 INFO L226 Difference]: Without dead ends: 79 [2022-11-25 18:10:56,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:10:56,851 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 16 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:10:56,852 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 179 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:10:56,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-25 18:10:56,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-11-25 18:10:56,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 65 states have internal predecessors, (75), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-25 18:10:56,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 101 transitions. [2022-11-25 18:10:56,865 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 101 transitions. Word has length 26 [2022-11-25 18:10:56,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:10:56,865 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 101 transitions. [2022-11-25 18:10:56,866 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:56,866 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 101 transitions. [2022-11-25 18:10:56,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-25 18:10:56,868 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:10:56,868 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:10:56,868 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 18:10:56,868 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:10:56,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:10:56,869 INFO L85 PathProgramCache]: Analyzing trace with hash -1012211940, now seen corresponding path program 1 times [2022-11-25 18:10:56,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:10:56,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [710685835] [2022-11-25 18:10:56,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:10:56,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:10:56,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:57,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 18:10:57,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:57,023 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:10:57,023 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:10:57,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [710685835] [2022-11-25 18:10:57,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [710685835] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:10:57,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:10:57,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:10:57,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686230970] [2022-11-25 18:10:57,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:10:57,025 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 18:10:57,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:10:57,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:10:57,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:10:57,026 INFO L87 Difference]: Start difference. First operand 79 states and 101 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:57,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:10:57,296 INFO L93 Difference]: Finished difference Result 263 states and 344 transitions. [2022-11-25 18:10:57,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 18:10:57,297 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-25 18:10:57,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:10:57,300 INFO L225 Difference]: With dead ends: 263 [2022-11-25 18:10:57,300 INFO L226 Difference]: Without dead ends: 192 [2022-11-25 18:10:57,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 18:10:57,303 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 208 mSDsluCounter, 365 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 491 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:10:57,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 491 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 18:10:57,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-25 18:10:57,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 186. [2022-11-25 18:10:57,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 133 states have (on average 1.3533834586466165) internal successors, (180), 151 states have internal predecessors, (180), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 21 states have call predecessors, (32), 31 states have call successors, (32) [2022-11-25 18:10:57,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 243 transitions. [2022-11-25 18:10:57,337 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 243 transitions. Word has length 30 [2022-11-25 18:10:57,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:10:57,337 INFO L495 AbstractCegarLoop]: Abstraction has 186 states and 243 transitions. [2022-11-25 18:10:57,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:57,338 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 243 transitions. [2022-11-25 18:10:57,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 18:10:57,340 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:10:57,340 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:10:57,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 18:10:57,340 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:10:57,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:10:57,341 INFO L85 PathProgramCache]: Analyzing trace with hash -1859613018, now seen corresponding path program 1 times [2022-11-25 18:10:57,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:10:57,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [357772755] [2022-11-25 18:10:57,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:10:57,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:10:57,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:57,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 18:10:57,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:10:57,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:10:57,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:10:57,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [357772755] [2022-11-25 18:10:57,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [357772755] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:10:57,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:10:57,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:10:57,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [668169526] [2022-11-25 18:10:57,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:10:57,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 18:10:57,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:10:57,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:10:57,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:10:57,479 INFO L87 Difference]: Start difference. First operand 186 states and 243 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:57,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:10:57,538 INFO L93 Difference]: Finished difference Result 316 states and 416 transitions. [2022-11-25 18:10:57,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:10:57,555 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-25 18:10:57,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:10:57,555 INFO L225 Difference]: With dead ends: 316 [2022-11-25 18:10:57,555 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 18:10:57,557 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:10:57,559 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 42 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:10:57,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 166 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:10:57,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 18:10:57,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 18:10:57,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:10:57,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 18:10:57,561 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2022-11-25 18:10:57,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:10:57,561 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 18:10:57,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:10:57,561 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 18:10:57,562 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 18:10:57,564 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 18:10:57,565 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 18:10:57,567 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 18:10:58,189 INFO L902 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 251 258) the Hoare annotation is: true [2022-11-25 18:10:58,190 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 251 258) no Hoare annotation was computed. [2022-11-25 18:10:58,190 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 251 258) no Hoare annotation was computed. [2022-11-25 18:10:58,190 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 167 173) no Hoare annotation was computed. [2022-11-25 18:10:58,190 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 167 173) the Hoare annotation is: true [2022-11-25 18:10:58,190 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 917 928) the Hoare annotation is: true [2022-11-25 18:10:58,191 INFO L899 garLoopResultBuilder]: For program point L921-1(lines 917 928) no Hoare annotation was computed. [2022-11-25 18:10:58,191 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 917 928) no Hoare annotation was computed. [2022-11-25 18:10:58,191 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 929 937) the Hoare annotation is: true [2022-11-25 18:10:58,192 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 929 937) no Hoare annotation was computed. [2022-11-25 18:10:58,192 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 929 937) no Hoare annotation was computed. [2022-11-25 18:10:58,192 INFO L902 garLoopResultBuilder]: At program point L800(line 800) the Hoare annotation is: true [2022-11-25 18:10:58,192 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 794 823) no Hoare annotation was computed. [2022-11-25 18:10:58,193 INFO L899 garLoopResultBuilder]: For program point L800-1(line 800) no Hoare annotation was computed. [2022-11-25 18:10:58,193 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 794 823) the Hoare annotation is: true [2022-11-25 18:10:58,193 INFO L902 garLoopResultBuilder]: At program point L819(lines 794 823) the Hoare annotation is: true [2022-11-25 18:10:58,193 INFO L899 garLoopResultBuilder]: For program point L815(line 815) no Hoare annotation was computed. [2022-11-25 18:10:58,194 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 812) no Hoare annotation was computed. [2022-11-25 18:10:58,194 INFO L902 garLoopResultBuilder]: At program point L808-1(lines 808 812) the Hoare annotation is: true [2022-11-25 18:10:58,194 INFO L899 garLoopResultBuilder]: For program point L805(line 805) no Hoare annotation was computed. [2022-11-25 18:10:58,194 INFO L902 garLoopResultBuilder]: At program point L804-2(lines 804 818) the Hoare annotation is: true [2022-11-25 18:10:58,195 INFO L899 garLoopResultBuilder]: For program point L126(line 126) no Hoare annotation was computed. [2022-11-25 18:10:58,195 INFO L895 garLoopResultBuilder]: At program point L275(lines 270 278) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2022-11-25 18:10:58,195 INFO L899 garLoopResultBuilder]: For program point L147-1(lines 146 165) no Hoare annotation was computed. [2022-11-25 18:10:58,196 INFO L899 garLoopResultBuilder]: For program point L209(lines 209 217) no Hoare annotation was computed. [2022-11-25 18:10:58,196 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 222) no Hoare annotation was computed. [2022-11-25 18:10:58,196 INFO L899 garLoopResultBuilder]: For program point L775(lines 775 785) no Hoare annotation was computed. [2022-11-25 18:10:58,196 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 143 166) no Hoare annotation was computed. [2022-11-25 18:10:58,197 INFO L899 garLoopResultBuilder]: For program point L771(lines 771 788) no Hoare annotation was computed. [2022-11-25 18:10:58,197 INFO L895 garLoopResultBuilder]: At program point L771-1(lines 763 791) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-25 18:10:58,197 INFO L895 garLoopResultBuilder]: At program point L127(lines 122 129) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-25 18:10:58,197 INFO L899 garLoopResultBuilder]: For program point L776(lines 776 782) no Hoare annotation was computed. [2022-11-25 18:10:58,198 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-25 18:10:58,198 INFO L895 garLoopResultBuilder]: At program point L211(line 211) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-25 18:10:58,198 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-25 18:10:58,198 INFO L899 garLoopResultBuilder]: For program point L207-1(line 207) no Hoare annotation was computed. [2022-11-25 18:10:58,199 INFO L899 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2022-11-25 18:10:58,199 INFO L895 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-25 18:10:58,199 INFO L899 garLoopResultBuilder]: For program point L769-1(line 769) no Hoare annotation was computed. [2022-11-25 18:10:58,199 INFO L895 garLoopResultBuilder]: At program point L897-2(lines 893 904) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-11-25 18:10:58,200 INFO L895 garLoopResultBuilder]: At program point L220(line 220) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2022-11-25 18:10:58,200 INFO L895 garLoopResultBuilder]: At program point L220-1(lines 201 225) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2022-11-25 18:10:58,200 INFO L899 garLoopResultBuilder]: For program point L154-1(lines 154 160) no Hoare annotation was computed. [2022-11-25 18:10:58,201 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 143 166) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-11-25 18:10:58,201 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 143 166) no Hoare annotation was computed. [2022-11-25 18:10:58,201 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 126) no Hoare annotation was computed. [2022-11-25 18:10:58,201 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-25 18:10:58,202 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-11-25 18:10:58,202 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-25 18:10:58,202 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-25 18:10:58,202 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 18:10:58,203 INFO L895 garLoopResultBuilder]: At program point L383(lines 378 386) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) [2022-11-25 18:10:58,203 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 18:10:58,203 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 18:10:58,203 INFO L895 garLoopResultBuilder]: At program point L346(lines 334 348) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-25 18:10:58,204 INFO L895 garLoopResultBuilder]: At program point L375(lines 371 377) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-25 18:10:58,204 INFO L899 garLoopResultBuilder]: For program point L338(lines 338 344) no Hoare annotation was computed. [2022-11-25 18:10:58,204 INFO L899 garLoopResultBuilder]: For program point L338-1(lines 338 344) no Hoare annotation was computed. [2022-11-25 18:10:58,204 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-11-25 18:10:58,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 18:10:58,205 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-11-25 18:10:58,205 INFO L902 garLoopResultBuilder]: At program point L863(lines 855 865) the Hoare annotation is: true [2022-11-25 18:10:58,205 INFO L895 garLoopResultBuilder]: At program point L760(lines 755 762) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) [2022-11-25 18:10:58,205 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-25 18:10:58,206 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-11-25 18:10:58,206 INFO L895 garLoopResultBuilder]: At program point L368(lines 364 370) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-11-25 18:10:58,206 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 883) no Hoare annotation was computed. [2022-11-25 18:10:58,206 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-11-25 18:10:58,207 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-11-25 18:10:58,207 INFO L899 garLoopResultBuilder]: For program point L876-2(lines 876 883) no Hoare annotation was computed. [2022-11-25 18:10:58,207 INFO L899 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-11-25 18:10:58,207 INFO L902 garLoopResultBuilder]: At program point L885(lines 866 888) the Hoare annotation is: true [2022-11-25 18:10:58,208 INFO L895 garLoopResultBuilder]: At program point L852(lines 848 854) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) [2022-11-25 18:10:58,208 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: false [2022-11-25 18:10:58,208 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-11-25 18:10:58,208 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-11-25 18:10:58,209 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-25 18:10:58,209 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 905 916) no Hoare annotation was computed. [2022-11-25 18:10:58,209 INFO L899 garLoopResultBuilder]: For program point L909-1(lines 905 916) no Hoare annotation was computed. [2022-11-25 18:10:58,209 INFO L902 garLoopResultBuilder]: At program point waterRiseENTRY(lines 905 916) the Hoare annotation is: true [2022-11-25 18:10:58,209 INFO L899 garLoopResultBuilder]: For program point L194-1(lines 175 199) no Hoare annotation was computed. [2022-11-25 18:10:58,210 INFO L895 garLoopResultBuilder]: At program point L975(lines 970 978) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,210 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,210 INFO L895 garLoopResultBuilder]: At program point L185(line 185) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,210 INFO L899 garLoopResultBuilder]: For program point L183(lines 183 191) no Hoare annotation was computed. [2022-11-25 18:10:58,211 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 196) no Hoare annotation was computed. [2022-11-25 18:10:58,211 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 175 199) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,211 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 175 199) no Hoare annotation was computed. [2022-11-25 18:10:58,211 INFO L895 garLoopResultBuilder]: At program point L330(lines 315 333) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,212 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 328) no Hoare annotation was computed. [2022-11-25 18:10:58,212 INFO L899 garLoopResultBuilder]: For program point L324-2(lines 324 328) no Hoare annotation was computed. [2022-11-25 18:10:58,212 INFO L895 garLoopResultBuilder]: At program point L194(line 194) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2022-11-25 18:10:58,212 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 259 269) the Hoare annotation is: true [2022-11-25 18:10:58,213 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 259 269) no Hoare annotation was computed. [2022-11-25 18:10:58,213 INFO L902 garLoopResultBuilder]: At program point L264(line 264) the Hoare annotation is: true [2022-11-25 18:10:58,213 INFO L899 garLoopResultBuilder]: For program point L264-1(line 264) no Hoare annotation was computed. [2022-11-25 18:10:58,213 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 259 269) no Hoare annotation was computed. [2022-11-25 18:10:58,217 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-11-25 18:10:58,220 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 18:10:58,238 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 06:10:58 BoogieIcfgContainer [2022-11-25 18:10:58,238 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 18:10:58,239 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 18:10:58,239 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 18:10:58,239 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 18:10:58,240 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:10:55" (3/4) ... [2022-11-25 18:10:58,243 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 18:10:58,251 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-25 18:10:58,251 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 18:10:58,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 18:10:58,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-25 18:10:58,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 18:10:58,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 18:10:58,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 18:10:58,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:10:58,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-25 18:10:58,260 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2022-11-25 18:10:58,261 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 18:10:58,261 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 18:10:58,262 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:10:58,262 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:10:58,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (pumpRunning == 0 && 1 == systemActive) && \result == systemActive [2022-11-25 18:10:58,291 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive [2022-11-25 18:10:58,291 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive [2022-11-25 18:10:58,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-25 18:10:58,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(0 == systemActive)) [2022-11-25 18:10:58,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-11-25 18:10:58,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) [2022-11-25 18:10:58,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || 0 == systemActive [2022-11-25 18:10:58,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-11-25 18:10:58,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || 0 == systemActive [2022-11-25 18:10:58,318 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 18:10:58,318 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 18:10:58,319 INFO L158 Benchmark]: Toolchain (without parser) took 3463.64ms. Allocated memory is still 178.3MB. Free memory was 144.5MB in the beginning and 130.5MB in the end (delta: 14.0MB). Peak memory consumption was 13.6MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,319 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory is still 80.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 18:10:58,319 INFO L158 Benchmark]: CACSL2BoogieTranslator took 502.69ms. Allocated memory is still 178.3MB. Free memory was 144.5MB in the beginning and 125.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,320 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.25ms. Allocated memory is still 178.3MB. Free memory was 125.6MB in the beginning and 122.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,320 INFO L158 Benchmark]: Boogie Preprocessor took 48.16ms. Allocated memory is still 178.3MB. Free memory was 122.9MB in the beginning and 121.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,320 INFO L158 Benchmark]: RCFGBuilder took 480.51ms. Allocated memory is still 178.3MB. Free memory was 121.4MB in the beginning and 105.5MB in the end (delta: 15.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,321 INFO L158 Benchmark]: TraceAbstraction took 2285.40ms. Allocated memory is still 178.3MB. Free memory was 104.6MB in the beginning and 135.7MB in the end (delta: -31.1MB). Peak memory consumption was 41.0MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,321 INFO L158 Benchmark]: Witness Printer took 79.32ms. Allocated memory is still 178.3MB. Free memory was 135.7MB in the beginning and 130.5MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 18:10:58,323 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 136.3MB. Free memory is still 80.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 502.69ms. Allocated memory is still 178.3MB. Free memory was 144.5MB in the beginning and 125.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.25ms. Allocated memory is still 178.3MB. Free memory was 125.6MB in the beginning and 122.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 48.16ms. Allocated memory is still 178.3MB. Free memory was 122.9MB in the beginning and 121.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 480.51ms. Allocated memory is still 178.3MB. Free memory was 121.4MB in the beginning and 105.5MB in the end (delta: 15.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 2285.40ms. Allocated memory is still 178.3MB. Free memory was 104.6MB in the beginning and 135.7MB in the end (delta: -31.1MB). Peak memory consumption was 41.0MB. Max. memory is 16.1GB. * Witness Printer took 79.32ms. Allocated memory is still 178.3MB. Free memory was 135.7MB in the beginning and 130.5MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 126]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 97 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.2s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 270 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 266 mSDsluCounter, 958 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 553 mSDsCounter, 17 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 139 IncrementalHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 17 mSolverCounterUnsat, 405 mSDtfsCounter, 139 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 27 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=186occurred in iteration=3, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 6 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 296 PreInvPairs, 335 NumberOfFragments, 238 HoareAnnotationTreeSize, 296 FomulaSimplifications, 42 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 44 FomulaSimplificationsInter, 656 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 115 NumberOfCodeBlocks, 115 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 111 ConstructedInterpolants, 0 QuantifiedInterpolants, 220 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && \result == systemActive - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || 0 == systemActive - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 755]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || 0 == systemActive - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 364]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 334]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 848]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(0 == systemActive)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) RESULT: Ultimate proved your program to be correct! [2022-11-25 18:10:58,352 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f38939ab-6411-409a-9c31-dec6ac9bd38b/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE