./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d2302423425d09a02191583f4a443e0b9b2d72b45fd4f1bcb2e2d3ac85995a3d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 16:03:16,636 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 16:03:16,638 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 16:03:16,651 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 16:03:16,651 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 16:03:16,652 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 16:03:16,653 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 16:03:16,654 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 16:03:16,655 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 16:03:16,656 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 16:03:16,657 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 16:03:16,657 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 16:03:16,658 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 16:03:16,658 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 16:03:16,659 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 16:03:16,660 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 16:03:16,661 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 16:03:16,661 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 16:03:16,662 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 16:03:16,664 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 16:03:16,665 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 16:03:16,666 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 16:03:16,666 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 16:03:16,667 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 16:03:16,669 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 16:03:16,670 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 16:03:16,670 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 16:03:16,670 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 16:03:16,671 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 16:03:16,671 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 16:03:16,672 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 16:03:16,672 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 16:03:16,673 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 16:03:16,673 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 16:03:16,674 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 16:03:16,674 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 16:03:16,675 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 16:03:16,675 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 16:03:16,675 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 16:03:16,676 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 16:03:16,676 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 16:03:16,677 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 16:03:16,692 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 16:03:16,692 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 16:03:16,693 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 16:03:16,693 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 16:03:16,693 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 16:03:16,693 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 16:03:16,694 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 16:03:16,694 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 16:03:16,694 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 16:03:16,694 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 16:03:16,694 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 16:03:16,695 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 16:03:16,696 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 16:03:16,696 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 16:03:16,696 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 16:03:16,697 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d2302423425d09a02191583f4a443e0b9b2d72b45fd4f1bcb2e2d3ac85995a3d [2022-12-13 16:03:16,855 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 16:03:16,872 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 16:03:16,874 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 16:03:16,875 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 16:03:16,876 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 16:03:16,877 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c [2022-12-13 16:03:19,424 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 16:03:19,611 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 16:03:19,611 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c [2022-12-13 16:03:19,619 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/data/1427a2df4/37e5958eb14047e098e60bc85c15fa9b/FLAG90eb43b88 [2022-12-13 16:03:20,011 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/data/1427a2df4/37e5958eb14047e098e60bc85c15fa9b [2022-12-13 16:03:20,016 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 16:03:20,018 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 16:03:20,020 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 16:03:20,020 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 16:03:20,026 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 16:03:20,026 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,028 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2cadfff0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20, skipping insertion in model container [2022-12-13 16:03:20,028 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,035 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 16:03:20,058 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 16:03:20,218 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c[5831,5844] [2022-12-13 16:03:20,262 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 16:03:20,270 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 16:03:20,288 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/sv-benchmarks/c/product-lines/minepump_spec2_product15.cil.c[5831,5844] [2022-12-13 16:03:20,316 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 16:03:20,328 INFO L208 MainTranslator]: Completed translation [2022-12-13 16:03:20,328 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20 WrapperNode [2022-12-13 16:03:20,328 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 16:03:20,329 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 16:03:20,329 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 16:03:20,330 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 16:03:20,335 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,346 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,367 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 19, calls inlined = 15, statements flattened = 147 [2022-12-13 16:03:20,367 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 16:03:20,368 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 16:03:20,368 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 16:03:20,368 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 16:03:20,377 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,378 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,379 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,380 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,384 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,388 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,389 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,390 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,392 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 16:03:20,393 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 16:03:20,393 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 16:03:20,393 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 16:03:20,394 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (1/1) ... [2022-12-13 16:03:20,400 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 16:03:20,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 16:03:20,423 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 16:03:20,425 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 16:03:20,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 16:03:20,458 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 16:03:20,459 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 16:03:20,459 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 16:03:20,459 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 16:03:20,459 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 16:03:20,459 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 16:03:20,459 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 16:03:20,459 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 16:03:20,460 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-12-13 16:03:20,460 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-12-13 16:03:20,460 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-12-13 16:03:20,460 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-12-13 16:03:20,460 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-13 16:03:20,460 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-13 16:03:20,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 16:03:20,461 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 16:03:20,461 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 16:03:20,461 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 16:03:20,461 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 16:03:20,524 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 16:03:20,526 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 16:03:20,728 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 16:03:20,736 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 16:03:20,736 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 16:03:20,738 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:03:20 BoogieIcfgContainer [2022-12-13 16:03:20,739 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 16:03:20,741 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 16:03:20,741 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 16:03:20,745 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 16:03:20,745 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 04:03:20" (1/3) ... [2022-12-13 16:03:20,746 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f70d7b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 04:03:20, skipping insertion in model container [2022-12-13 16:03:20,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:03:20" (2/3) ... [2022-12-13 16:03:20,746 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f70d7b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 04:03:20, skipping insertion in model container [2022-12-13 16:03:20,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:03:20" (3/3) ... [2022-12-13 16:03:20,748 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product15.cil.c [2022-12-13 16:03:20,768 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 16:03:20,768 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 16:03:20,819 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 16:03:20,824 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1918730b, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 16:03:20,824 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 16:03:20,827 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 69 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 16:03:20,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 16:03:20,834 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:03:20,834 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:03:20,835 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:03:20,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:03:20,839 INFO L85 PathProgramCache]: Analyzing trace with hash -326168501, now seen corresponding path program 1 times [2022-12-13 16:03:20,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:03:20,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642228784] [2022-12-13 16:03:20,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:03:20,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:03:20,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:20,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 16:03:20,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:20,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:03:20,979 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:03:20,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642228784] [2022-12-13 16:03:20,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642228784] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:03:20,980 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:03:20,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 16:03:20,981 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [6337820] [2022-12-13 16:03:20,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:03:20,985 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 16:03:20,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:03:21,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 16:03:21,009 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 16:03:21,010 INFO L87 Difference]: Start difference. First operand has 85 states, 62 states have (on average 1.3709677419354838) internal successors, (85), 69 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:03:21,035 INFO L93 Difference]: Finished difference Result 161 states and 216 transitions. [2022-12-13 16:03:21,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 16:03:21,037 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 16:03:21,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:03:21,044 INFO L225 Difference]: With dead ends: 161 [2022-12-13 16:03:21,044 INFO L226 Difference]: Without dead ends: 76 [2022-12-13 16:03:21,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 16:03:21,049 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:03:21,050 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:03:21,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-12-13 16:03:21,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-12-13 16:03:21,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 55 states have (on average 1.290909090909091) internal successors, (71), 61 states have internal predecessors, (71), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-13 16:03:21,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 96 transitions. [2022-12-13 16:03:21,081 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 96 transitions. Word has length 25 [2022-12-13 16:03:21,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:03:21,082 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 96 transitions. [2022-12-13 16:03:21,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,082 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 96 transitions. [2022-12-13 16:03:21,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 16:03:21,084 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:03:21,084 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:03:21,084 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 16:03:21,084 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:03:21,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:03:21,085 INFO L85 PathProgramCache]: Analyzing trace with hash -1971183804, now seen corresponding path program 1 times [2022-12-13 16:03:21,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:03:21,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817455639] [2022-12-13 16:03:21,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:03:21,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:03:21,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 16:03:21,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:03:21,189 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:03:21,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817455639] [2022-12-13 16:03:21,189 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817455639] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:03:21,190 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:03:21,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 16:03:21,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206311913] [2022-12-13 16:03:21,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:03:21,191 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 16:03:21,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:03:21,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 16:03:21,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:03:21,193 INFO L87 Difference]: Start difference. First operand 76 states and 96 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:03:21,210 INFO L93 Difference]: Finished difference Result 113 states and 141 transitions. [2022-12-13 16:03:21,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 16:03:21,210 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 16:03:21,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:03:21,212 INFO L225 Difference]: With dead ends: 113 [2022-12-13 16:03:21,212 INFO L226 Difference]: Without dead ends: 67 [2022-12-13 16:03:21,213 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:03:21,214 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 16 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:03:21,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:03:21,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-12-13 16:03:21,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2022-12-13 16:03:21,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 49 states have (on average 1.3061224489795917) internal successors, (64), 55 states have internal predecessors, (64), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-13 16:03:21,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 84 transitions. [2022-12-13 16:03:21,224 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 84 transitions. Word has length 26 [2022-12-13 16:03:21,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:03:21,225 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 84 transitions. [2022-12-13 16:03:21,225 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,225 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 84 transitions. [2022-12-13 16:03:21,226 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-13 16:03:21,226 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:03:21,227 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:03:21,227 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 16:03:21,227 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:03:21,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:03:21,228 INFO L85 PathProgramCache]: Analyzing trace with hash -409860073, now seen corresponding path program 1 times [2022-12-13 16:03:21,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:03:21,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [663757512] [2022-12-13 16:03:21,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:03:21,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:03:21,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:03:21,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:03:21,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:03:21,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [663757512] [2022-12-13 16:03:21,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [663757512] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:03:21,339 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:03:21,339 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 16:03:21,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254067415] [2022-12-13 16:03:21,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:03:21,340 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 16:03:21,340 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:03:21,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 16:03:21,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:03:21,341 INFO L87 Difference]: Start difference. First operand 67 states and 84 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:03:21,371 INFO L93 Difference]: Finished difference Result 184 states and 236 transitions. [2022-12-13 16:03:21,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 16:03:21,372 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-12-13 16:03:21,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:03:21,374 INFO L225 Difference]: With dead ends: 184 [2022-12-13 16:03:21,374 INFO L226 Difference]: Without dead ends: 125 [2022-12-13 16:03:21,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:03:21,376 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 63 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:03:21,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 179 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:03:21,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-12-13 16:03:21,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 122. [2022-12-13 16:03:21,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 87 states have (on average 1.3333333333333333) internal successors, (116), 98 states have internal predecessors, (116), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 15 states have call predecessors, (20), 20 states have call successors, (20) [2022-12-13 16:03:21,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 156 transitions. [2022-12-13 16:03:21,397 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 156 transitions. Word has length 30 [2022-12-13 16:03:21,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:03:21,397 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 156 transitions. [2022-12-13 16:03:21,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,397 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 156 transitions. [2022-12-13 16:03:21,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-13 16:03:21,400 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:03:21,400 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:03:21,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 16:03:21,400 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:03:21,401 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:03:21,401 INFO L85 PathProgramCache]: Analyzing trace with hash 1560227681, now seen corresponding path program 1 times [2022-12-13 16:03:21,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:03:21,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1762141108] [2022-12-13 16:03:21,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:03:21,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:03:21,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 16:03:21,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:03:21,506 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:03:21,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:03:21,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1762141108] [2022-12-13 16:03:21,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1762141108] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:03:21,506 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:03:21,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 16:03:21,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1471077208] [2022-12-13 16:03:21,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:03:21,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 16:03:21,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:03:21,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 16:03:21,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 16:03:21,508 INFO L87 Difference]: Start difference. First operand 122 states and 156 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:03:21,553 INFO L93 Difference]: Finished difference Result 206 states and 265 transitions. [2022-12-13 16:03:21,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 16:03:21,553 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-12-13 16:03:21,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:03:21,554 INFO L225 Difference]: With dead ends: 206 [2022-12-13 16:03:21,554 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 16:03:21,555 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 16:03:21,556 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 37 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:03:21,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 154 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:03:21,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 16:03:21,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 16:03:21,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 16:03:21,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 16:03:21,558 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2022-12-13 16:03:21,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:03:21,558 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 16:03:21,558 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:03:21,558 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 16:03:21,558 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 16:03:21,561 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 16:03:21,561 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 16:03:21,562 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 16:03:21,737 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 145 152) no Hoare annotation was computed. [2022-12-13 16:03:21,738 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 145 152) the Hoare annotation is: true [2022-12-13 16:03:21,738 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 145 152) no Hoare annotation was computed. [2022-12-13 16:03:21,738 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 322 333) the Hoare annotation is: true [2022-12-13 16:03:21,738 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 322 333) no Hoare annotation was computed. [2022-12-13 16:03:21,738 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 322 333) no Hoare annotation was computed. [2022-12-13 16:03:21,738 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 829 858) no Hoare annotation was computed. [2022-12-13 16:03:21,739 INFO L902 garLoopResultBuilder]: At program point L854(lines 829 858) the Hoare annotation is: true [2022-12-13 16:03:21,739 INFO L899 garLoopResultBuilder]: For program point L850(line 850) no Hoare annotation was computed. [2022-12-13 16:03:21,739 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2022-12-13 16:03:21,739 INFO L902 garLoopResultBuilder]: At program point L843-1(lines 843 847) the Hoare annotation is: true [2022-12-13 16:03:21,739 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 829 858) the Hoare annotation is: true [2022-12-13 16:03:21,739 INFO L899 garLoopResultBuilder]: For program point L840(line 840) no Hoare annotation was computed. [2022-12-13 16:03:21,739 INFO L902 garLoopResultBuilder]: At program point L839-2(lines 839 853) the Hoare annotation is: true [2022-12-13 16:03:21,740 INFO L902 garLoopResultBuilder]: At program point L835(line 835) the Hoare annotation is: true [2022-12-13 16:03:21,740 INFO L899 garLoopResultBuilder]: For program point L835-1(line 835) no Hoare annotation was computed. [2022-12-13 16:03:21,740 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 334 342) the Hoare annotation is: true [2022-12-13 16:03:21,740 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 334 342) no Hoare annotation was computed. [2022-12-13 16:03:21,740 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 334 342) no Hoare annotation was computed. [2022-12-13 16:03:21,740 INFO L895 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-12-13 16:03:21,740 INFO L895 garLoopResultBuilder]: At program point L114-1(lines 95 119) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 63 86) no Hoare annotation was computed. [2022-12-13 16:03:21,741 INFO L895 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point L804-1(line 804) no Hoare annotation was computed. [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 111) no Hoare annotation was computed. [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point L99(lines 99 116) no Hoare annotation was computed. [2022-12-13 16:03:21,741 INFO L899 garLoopResultBuilder]: For program point L380(line 380) no Hoare annotation was computed. [2022-12-13 16:03:21,742 INFO L899 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2022-12-13 16:03:21,742 INFO L895 garLoopResultBuilder]: At program point L302-2(lines 298 309) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-12-13 16:03:21,742 INFO L899 garLoopResultBuilder]: For program point L810(lines 810 820) no Hoare annotation was computed. [2022-12-13 16:03:21,742 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 376 383) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-12-13 16:03:21,742 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 63 86) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-12-13 16:03:21,742 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 823) no Hoare annotation was computed. [2022-12-13 16:03:21,742 INFO L895 garLoopResultBuilder]: At program point L806-1(lines 798 826) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2022-12-13 16:03:21,742 INFO L899 garLoopResultBuilder]: For program point L67-1(lines 66 85) no Hoare annotation was computed. [2022-12-13 16:03:21,743 INFO L895 garLoopResultBuilder]: At program point L109(line 109) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-12-13 16:03:21,743 INFO L899 garLoopResultBuilder]: For program point L811(lines 811 817) no Hoare annotation was computed. [2022-12-13 16:03:21,743 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 63 86) no Hoare annotation was computed. [2022-12-13 16:03:21,743 INFO L895 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-12-13 16:03:21,743 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 164 172) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2022-12-13 16:03:21,743 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 380) no Hoare annotation was computed. [2022-12-13 16:03:21,744 INFO L895 garLoopResultBuilder]: At program point L101(line 101) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2022-12-13 16:03:21,744 INFO L899 garLoopResultBuilder]: For program point L101-1(line 101) no Hoare annotation was computed. [2022-12-13 16:03:21,744 INFO L899 garLoopResultBuilder]: For program point L258-1(lines 258 264) no Hoare annotation was computed. [2022-12-13 16:03:21,744 INFO L895 garLoopResultBuilder]: At program point L283(lines 238 285) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-13 16:03:21,744 INFO L895 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-13 16:03:21,744 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2022-12-13 16:03:21,744 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2022-12-13 16:03:21,745 INFO L899 garLoopResultBuilder]: For program point L911(lines 911 918) no Hoare annotation was computed. [2022-12-13 16:03:21,745 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 890 900) the Hoare annotation is: true [2022-12-13 16:03:21,745 INFO L899 garLoopResultBuilder]: For program point L911-2(lines 911 918) no Hoare annotation was computed. [2022-12-13 16:03:21,745 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 765 771) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-12-13 16:03:21,745 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 901 923) the Hoare annotation is: true [2022-12-13 16:03:21,745 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 16:03:21,745 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 16:03:21,746 INFO L899 garLoopResultBuilder]: For program point L239(lines 238 285) no Hoare annotation was computed. [2022-12-13 16:03:21,746 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 281) no Hoare annotation was computed. [2022-12-13 16:03:21,746 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-12-13 16:03:21,746 INFO L895 garLoopResultBuilder]: At program point L260(line 260) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-13 16:03:21,746 INFO L902 garLoopResultBuilder]: At program point L289(lines 228 293) the Hoare annotation is: true [2022-12-13 16:03:21,746 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 16:03:21,747 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2022-12-13 16:03:21,747 INFO L899 garLoopResultBuilder]: For program point L248-1(lines 248 254) no Hoare annotation was computed. [2022-12-13 16:03:21,747 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: false [2022-12-13 16:03:21,747 INFO L899 garLoopResultBuilder]: For program point L240(lines 240 244) no Hoare annotation was computed. [2022-12-13 16:03:21,747 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 16:03:21,747 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 772 778) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-12-13 16:03:21,747 INFO L895 garLoopResultBuilder]: At program point L286(lines 237 287) the Hoare annotation is: false [2022-12-13 16:03:21,748 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 790 797) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-12-13 16:03:21,748 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 280) no Hoare annotation was computed. [2022-12-13 16:03:21,748 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 209 223) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-13 16:03:21,748 INFO L895 garLoopResultBuilder]: At program point L274-2(lines 268 281) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-12-13 16:03:21,748 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 779 787) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2022-12-13 16:03:21,748 INFO L899 garLoopResultBuilder]: For program point L258(lines 258 264) no Hoare annotation was computed. [2022-12-13 16:03:21,749 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 310 321) no Hoare annotation was computed. [2022-12-13 16:03:21,749 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 310 321) the Hoare annotation is: true [2022-12-13 16:03:21,749 INFO L899 garLoopResultBuilder]: For program point L314-1(lines 310 321) no Hoare annotation was computed. [2022-12-13 16:03:21,749 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 87 93) no Hoare annotation was computed. [2022-12-13 16:03:21,749 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 87 93) the Hoare annotation is: true [2022-12-13 16:03:21,749 INFO L902 garLoopResultBuilder]: At program point L158(line 158) the Hoare annotation is: true [2022-12-13 16:03:21,749 INFO L899 garLoopResultBuilder]: For program point L158-1(line 158) no Hoare annotation was computed. [2022-12-13 16:03:21,749 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 153 163) no Hoare annotation was computed. [2022-12-13 16:03:21,750 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 153 163) the Hoare annotation is: true [2022-12-13 16:03:21,750 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 153 163) no Hoare annotation was computed. [2022-12-13 16:03:21,753 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-12-13 16:03:21,755 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 16:03:21,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 04:03:21 BoogieIcfgContainer [2022-12-13 16:03:21,768 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 16:03:21,769 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 16:03:21,769 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 16:03:21,769 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 16:03:21,769 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:03:20" (3/4) ... [2022-12-13 16:03:21,772 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 16:03:21,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-12-13 16:03:21,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-12-13 16:03:21,781 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2022-12-13 16:03:21,782 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 16:03:21,782 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 16:03:21,782 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 16:03:21,782 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 16:03:21,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-12-13 16:03:21,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-12-13 16:03:21,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || pumpRunning == 0 [2022-12-13 16:03:21,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) [2022-12-13 16:03:21,809 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) [2022-12-13 16:03:21,826 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 16:03:21,826 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 16:03:21,827 INFO L158 Benchmark]: Toolchain (without parser) took 1809.51ms. Allocated memory was 167.8MB in the beginning and 205.5MB in the end (delta: 37.7MB). Free memory was 129.4MB in the beginning and 112.0MB in the end (delta: 17.5MB). Peak memory consumption was 57.1MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,827 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 167.8MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 16:03:21,828 INFO L158 Benchmark]: CACSL2BoogieTranslator took 308.68ms. Allocated memory is still 167.8MB. Free memory was 129.2MB in the beginning and 110.6MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,828 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.31ms. Allocated memory is still 167.8MB. Free memory was 110.6MB in the beginning and 109.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,828 INFO L158 Benchmark]: Boogie Preprocessor took 24.32ms. Allocated memory is still 167.8MB. Free memory was 109.1MB in the beginning and 107.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,828 INFO L158 Benchmark]: RCFGBuilder took 345.62ms. Allocated memory is still 167.8MB. Free memory was 107.0MB in the beginning and 92.4MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,829 INFO L158 Benchmark]: TraceAbstraction took 1026.89ms. Allocated memory was 167.8MB in the beginning and 205.5MB in the end (delta: 37.7MB). Free memory was 91.8MB in the beginning and 116.2MB in the end (delta: -24.4MB). Peak memory consumption was 15.2MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,829 INFO L158 Benchmark]: Witness Printer took 57.82ms. Allocated memory is still 205.5MB. Free memory was 116.2MB in the beginning and 112.0MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-13 16:03:21,830 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 167.8MB. Free memory is still 110.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 308.68ms. Allocated memory is still 167.8MB. Free memory was 129.2MB in the beginning and 110.6MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.31ms. Allocated memory is still 167.8MB. Free memory was 110.6MB in the beginning and 109.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 24.32ms. Allocated memory is still 167.8MB. Free memory was 109.1MB in the beginning and 107.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 345.62ms. Allocated memory is still 167.8MB. Free memory was 107.0MB in the beginning and 92.4MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 1026.89ms. Allocated memory was 167.8MB in the beginning and 205.5MB in the end (delta: 37.7MB). Free memory was 91.8MB in the beginning and 116.2MB in the end (delta: -24.4MB). Peak memory consumption was 15.2MB. Max. memory is 16.1GB. * Witness Printer took 57.82ms. Allocated memory is still 205.5MB. Free memory was 116.2MB in the beginning and 112.0MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 380]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.0s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 120 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 116 mSDsluCounter, 583 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 236 mSDsCounter, 3 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 19 IncrementalHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3 mSolverCounterUnsat, 347 mSDtfsCounter, 19 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=122occurred in iteration=3, InterpolantAutomatonStates: 13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 190 PreInvPairs, 215 NumberOfFragments, 159 HoareAnnotationTreeSize, 190 FomulaSimplifications, 11 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 38 FomulaSimplificationsInter, 272 FormulaSimplificationTreeSizeReductionInter, 0.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 115 NumberOfCodeBlocks, 115 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 111 ConstructedInterpolants, 0 QuantifiedInterpolants, 207 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 798]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || pumpRunning == 0 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: pumpRunning == 0 && 1 == systemActive - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: !(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0) - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-12-13 16:03:21,847 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b00a55fb-3810-4b50-aa29-8ab9ef282941/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE