./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash adc521790d868e8902785ea29b51f549e45d9404af4185d7531e4ae8ae0e6ca8 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:53:44,841 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:53:44,916 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:53:44,922 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:53:44,923 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:53:44,950 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:53:44,951 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:53:44,952 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:53:44,953 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:53:44,954 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:53:44,955 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:53:44,955 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:53:44,956 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:53:44,956 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:53:44,957 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:53:44,958 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:53:44,958 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:53:44,959 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:53:44,959 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:53:44,960 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:53:44,961 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:53:44,961 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:53:44,962 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:53:44,963 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:53:44,963 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:53:44,964 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:53:44,964 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:53:44,965 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:53:44,965 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:53:44,966 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:53:44,966 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:53:44,967 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:53:44,967 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:53:44,968 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:53:44,968 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:53:44,969 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:53:44,969 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:53:44,970 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:53:44,970 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:53:44,970 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> adc521790d868e8902785ea29b51f549e45d9404af4185d7531e4ae8ae0e6ca8 [2023-11-06 22:53:45,243 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:53:45,280 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:53:45,283 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:53:45,285 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:53:45,286 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:53:45,288 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c [2023-11-06 22:53:48,561 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:53:48,826 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:53:48,827 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c [2023-11-06 22:53:48,845 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/data/85f9c8f0b/8fce41b7a3614bdb9d2a1d23db91e3b5/FLAG596025012 [2023-11-06 22:53:48,862 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/data/85f9c8f0b/8fce41b7a3614bdb9d2a1d23db91e3b5 [2023-11-06 22:53:48,865 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:53:48,867 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:53:48,869 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:53:48,869 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:53:48,875 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:53:48,876 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:53:48" (1/1) ... [2023-11-06 22:53:48,877 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3f6cfae1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:48, skipping insertion in model container [2023-11-06 22:53:48,877 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:53:48" (1/1) ... [2023-11-06 22:53:48,943 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:53:49,193 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c[14923,14936] [2023-11-06 22:53:49,209 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:53:49,220 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:53:49,234 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] [2023-11-06 22:53:49,236 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] [2023-11-06 22:53:49,236 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [288] [2023-11-06 22:53:49,236 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [654] [2023-11-06 22:53:49,236 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [692] [2023-11-06 22:53:49,237 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [701] [2023-11-06 22:53:49,237 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [797] [2023-11-06 22:53:49,237 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [823] [2023-11-06 22:53:49,305 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/sv-benchmarks/c/product-lines/minepump_spec1_product08.cil.c[14923,14936] [2023-11-06 22:53:49,312 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:53:49,332 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:53:49,332 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49 WrapperNode [2023-11-06 22:53:49,333 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:53:49,334 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:53:49,334 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:53:49,334 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:53:49,343 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,359 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,385 INFO L138 Inliner]: procedures = 52, calls = 95, calls flagged for inlining = 19, calls inlined = 16, statements flattened = 154 [2023-11-06 22:53:49,385 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:53:49,386 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:53:49,386 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:53:49,387 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:53:49,397 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,397 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,399 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,400 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,406 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,411 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,413 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,415 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,418 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:53:49,419 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:53:49,419 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:53:49,419 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:53:49,420 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (1/1) ... [2023-11-06 22:53:49,442 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:53:49,460 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:53:49,474 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:53:49,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:53:49,509 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:53:49,509 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:53:49,509 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:53:49,510 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:53:49,510 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:53:49,510 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:53:49,510 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:53:49,510 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:53:49,510 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:53:49,511 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:53:49,511 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:53:49,511 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:53:49,511 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:53:49,511 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:53:49,511 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:53:49,512 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:53:49,512 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:53:49,512 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:53:49,592 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:53:49,595 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:53:49,937 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:53:49,946 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:53:49,946 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:53:49,949 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:53:49 BoogieIcfgContainer [2023-11-06 22:53:49,949 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:53:49,952 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:53:49,953 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:53:49,956 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:53:49,957 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:53:48" (1/3) ... [2023-11-06 22:53:49,957 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@685f4e84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:53:49, skipping insertion in model container [2023-11-06 22:53:49,958 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:53:49" (2/3) ... [2023-11-06 22:53:49,958 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@685f4e84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:53:49, skipping insertion in model container [2023-11-06 22:53:49,958 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:53:49" (3/3) ... [2023-11-06 22:53:49,960 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product08.cil.c [2023-11-06 22:53:49,982 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:53:49,982 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:53:50,039 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:53:50,048 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6469177e, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:53:50,048 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:53:50,053 INFO L276 IsEmpty]: Start isEmpty. Operand has 80 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:53:50,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-06 22:53:50,063 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:50,063 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:50,064 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:50,069 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:50,069 INFO L85 PathProgramCache]: Analyzing trace with hash 1563426226, now seen corresponding path program 1 times [2023-11-06 22:53:50,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:50,080 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1420825862] [2023-11-06 22:53:50,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:50,081 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:50,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:50,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:53:50,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:50,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:53:50,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:50,404 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1420825862] [2023-11-06 22:53:50,405 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1420825862] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:53:50,405 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:53:50,405 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:53:50,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130466049] [2023-11-06 22:53:50,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:53:50,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:53:50,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:50,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:53:50,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:53:50,450 INFO L87 Difference]: Start difference. First operand has 80 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:50,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:50,498 INFO L93 Difference]: Finished difference Result 152 states and 205 transitions. [2023-11-06 22:53:50,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:53:50,501 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-06 22:53:50,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:50,512 INFO L225 Difference]: With dead ends: 152 [2023-11-06 22:53:50,512 INFO L226 Difference]: Without dead ends: 71 [2023-11-06 22:53:50,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:53:50,521 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:50,522 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:53:50,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2023-11-06 22:53:50,587 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2023-11-06 22:53:50,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 52 states have (on average 1.2884615384615385) internal successors, (67), 58 states have internal predecessors, (67), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:53:50,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 90 transitions. [2023-11-06 22:53:50,602 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 90 transitions. Word has length 23 [2023-11-06 22:53:50,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:50,603 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 90 transitions. [2023-11-06 22:53:50,605 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:50,605 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 90 transitions. [2023-11-06 22:53:50,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:53:50,611 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:50,611 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:50,611 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:53:50,612 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:50,613 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:50,614 INFO L85 PathProgramCache]: Analyzing trace with hash -756114654, now seen corresponding path program 1 times [2023-11-06 22:53:50,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:50,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1548900091] [2023-11-06 22:53:50,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:50,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:50,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:50,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:53:50,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:50,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:53:50,864 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:50,864 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1548900091] [2023-11-06 22:53:50,865 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1548900091] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:53:50,865 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:53:50,865 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:53:50,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [491777702] [2023-11-06 22:53:50,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:53:50,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:53:50,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:50,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:53:50,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:53:50,868 INFO L87 Difference]: Start difference. First operand 71 states and 90 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:50,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:50,891 INFO L93 Difference]: Finished difference Result 103 states and 129 transitions. [2023-11-06 22:53:50,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:53:50,893 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-06 22:53:50,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:50,894 INFO L225 Difference]: With dead ends: 103 [2023-11-06 22:53:50,894 INFO L226 Difference]: Without dead ends: 62 [2023-11-06 22:53:50,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:53:50,897 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 17 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:50,898 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 132 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:53:50,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-11-06 22:53:50,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2023-11-06 22:53:50,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 46 states have (on average 1.3043478260869565) internal successors, (60), 52 states have internal predecessors, (60), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:53:50,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 78 transitions. [2023-11-06 22:53:50,911 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 78 transitions. Word has length 24 [2023-11-06 22:53:50,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:50,911 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 78 transitions. [2023-11-06 22:53:50,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:50,912 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 78 transitions. [2023-11-06 22:53:50,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-06 22:53:50,914 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:50,914 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:50,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:53:50,915 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:50,915 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:50,916 INFO L85 PathProgramCache]: Analyzing trace with hash -1343958209, now seen corresponding path program 1 times [2023-11-06 22:53:50,916 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:50,916 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101622307] [2023-11-06 22:53:50,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:50,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:50,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:51,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:53:51,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:51,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:53:51,136 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:51,136 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2101622307] [2023-11-06 22:53:51,137 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2101622307] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:53:51,137 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:53:51,137 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:53:51,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220559815] [2023-11-06 22:53:51,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:53:51,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:53:51,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:51,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:53:51,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:53:51,140 INFO L87 Difference]: Start difference. First operand 62 states and 78 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:51,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:51,310 INFO L93 Difference]: Finished difference Result 159 states and 204 transitions. [2023-11-06 22:53:51,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:53:51,311 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2023-11-06 22:53:51,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:51,314 INFO L225 Difference]: With dead ends: 159 [2023-11-06 22:53:51,315 INFO L226 Difference]: Without dead ends: 104 [2023-11-06 22:53:51,322 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:53:51,324 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 141 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:51,324 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 260 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:53:51,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-06 22:53:51,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2023-11-06 22:53:51,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3333333333333333) internal successors, (100), 84 states have internal predecessors, (100), 14 states have call successors, (14), 11 states have call predecessors, (14), 11 states have return successors, (15), 11 states have call predecessors, (15), 14 states have call successors, (15) [2023-11-06 22:53:51,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 129 transitions. [2023-11-06 22:53:51,354 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 129 transitions. Word has length 29 [2023-11-06 22:53:51,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:51,354 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 129 transitions. [2023-11-06 22:53:51,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:51,355 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 129 transitions. [2023-11-06 22:53:51,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:53:51,357 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:51,357 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:51,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:53:51,358 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:51,358 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:51,358 INFO L85 PathProgramCache]: Analyzing trace with hash 609353326, now seen corresponding path program 1 times [2023-11-06 22:53:51,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:51,359 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264069498] [2023-11-06 22:53:51,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:51,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:51,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:51,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:53:51,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:51,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:53:51,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:51,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264069498] [2023-11-06 22:53:51,616 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264069498] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:53:51,617 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:53:51,617 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:53:51,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179980188] [2023-11-06 22:53:51,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:53:51,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:53:51,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:51,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:53:51,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:53:51,621 INFO L87 Difference]: Start difference. First operand 101 states and 129 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:51,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:51,688 INFO L93 Difference]: Finished difference Result 181 states and 236 transitions. [2023-11-06 22:53:51,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:53:51,689 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 22:53:51,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:51,690 INFO L225 Difference]: With dead ends: 181 [2023-11-06 22:53:51,690 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:53:51,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:53:51,693 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 36 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:51,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 154 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:53:51,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:53:51,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:53:51,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:53:51,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:53:51,696 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 32 [2023-11-06 22:53:51,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:51,696 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:53:51,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:53:51,697 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:53:51,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:53:51,700 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:53:51,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:53:51,702 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:53:52,058 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 201 208) no Hoare annotation was computed. [2023-11-06 22:53:52,058 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 201 208) the Hoare annotation is: true [2023-11-06 22:53:52,059 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 201 208) no Hoare annotation was computed. [2023-11-06 22:53:52,059 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 160 166) no Hoare annotation was computed. [2023-11-06 22:53:52,059 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 160 166) the Hoare annotation is: true [2023-11-06 22:53:52,059 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 851 862) the Hoare annotation is: true [2023-11-06 22:53:52,060 INFO L899 garLoopResultBuilder]: For program point L855-1(lines 851 862) no Hoare annotation was computed. [2023-11-06 22:53:52,060 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 851 862) no Hoare annotation was computed. [2023-11-06 22:53:52,060 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 863 871) the Hoare annotation is: true [2023-11-06 22:53:52,060 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 863 871) no Hoare annotation was computed. [2023-11-06 22:53:52,060 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 863 871) no Hoare annotation was computed. [2023-11-06 22:53:52,061 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 703 732) no Hoare annotation was computed. [2023-11-06 22:53:52,061 INFO L902 garLoopResultBuilder]: At program point L728(lines 703 732) the Hoare annotation is: true [2023-11-06 22:53:52,061 INFO L899 garLoopResultBuilder]: For program point L724(line 724) no Hoare annotation was computed. [2023-11-06 22:53:52,062 INFO L899 garLoopResultBuilder]: For program point L717(lines 717 721) no Hoare annotation was computed. [2023-11-06 22:53:52,063 INFO L902 garLoopResultBuilder]: At program point L717-1(lines 717 721) the Hoare annotation is: true [2023-11-06 22:53:52,064 INFO L899 garLoopResultBuilder]: For program point L714(line 714) no Hoare annotation was computed. [2023-11-06 22:53:52,065 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 703 732) the Hoare annotation is: true [2023-11-06 22:53:52,066 INFO L902 garLoopResultBuilder]: At program point L713-2(lines 713 727) the Hoare annotation is: true [2023-11-06 22:53:52,066 INFO L902 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: true [2023-11-06 22:53:52,066 INFO L899 garLoopResultBuilder]: For program point L709-1(line 709) no Hoare annotation was computed. [2023-11-06 22:53:52,066 INFO L899 garLoopResultBuilder]: For program point L147-1(lines 147 153) no Hoare annotation was computed. [2023-11-06 22:53:52,067 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 184) no Hoare annotation was computed. [2023-11-06 22:53:52,067 INFO L899 garLoopResultBuilder]: For program point L172(lines 172 189) no Hoare annotation was computed. [2023-11-06 22:53:52,067 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 136 159) no Hoare annotation was computed. [2023-11-06 22:53:52,067 INFO L895 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:53:52,068 INFO L899 garLoopResultBuilder]: For program point L804-1(line 804) no Hoare annotation was computed. [2023-11-06 22:53:52,068 INFO L899 garLoopResultBuilder]: For program point L697(line 697) no Hoare annotation was computed. [2023-11-06 22:53:52,069 INFO L895 garLoopResultBuilder]: At program point L214(line 214) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,069 INFO L899 garLoopResultBuilder]: For program point L214-1(line 214) no Hoare annotation was computed. [2023-11-06 22:53:52,069 INFO L899 garLoopResultBuilder]: For program point L140-1(lines 139 158) no Hoare annotation was computed. [2023-11-06 22:53:52,069 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,070 INFO L895 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,070 INFO L899 garLoopResultBuilder]: For program point L810(lines 810 816) no Hoare annotation was computed. [2023-11-06 22:53:52,070 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 693 700) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,071 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 136 159) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:53:52,071 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 819) no Hoare annotation was computed. [2023-11-06 22:53:52,076 INFO L895 garLoopResultBuilder]: At program point L806-1(lines 798 822) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:53:52,077 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2023-11-06 22:53:52,078 INFO L895 garLoopResultBuilder]: At program point L831-2(lines 827 838) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,078 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:53:52,079 INFO L895 garLoopResultBuilder]: At program point L187-1(lines 168 192) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:53:52,079 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 136 159) no Hoare annotation was computed. [2023-11-06 22:53:52,079 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 209 219) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:53:52,080 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 220 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2023-11-06 22:53:52,081 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 697) no Hoare annotation was computed. [2023-11-06 22:53:52,084 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 280 287) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:53:52,085 INFO L895 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: false [2023-11-06 22:53:52,086 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 764 773) the Hoare annotation is: true [2023-11-06 22:53:52,086 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 669 675) the Hoare annotation is: (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:53:52,086 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 774 796) the Hoare annotation is: true [2023-11-06 22:53:52,086 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:53:52,087 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:53:52,088 INFO L902 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2023-11-06 22:53:52,088 INFO L899 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2023-11-06 22:53:52,093 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2023-11-06 22:53:52,094 INFO L899 garLoopResultBuilder]: For program point L784(lines 784 791) no Hoare annotation was computed. [2023-11-06 22:53:52,094 INFO L895 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1)) [2023-11-06 22:53:52,095 INFO L899 garLoopResultBuilder]: For program point L784-2(lines 784 791) no Hoare annotation was computed. [2023-11-06 22:53:52,095 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 757 763) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:53:52,095 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:53:52,096 INFO L895 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2023-11-06 22:53:52,096 INFO L899 garLoopResultBuilder]: For program point L269(lines 269 275) no Hoare annotation was computed. [2023-11-06 22:53:52,096 INFO L899 garLoopResultBuilder]: For program point L269-1(lines 269 275) no Hoare annotation was computed. [2023-11-06 22:53:52,096 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:53:52,096 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 676 682) the Hoare annotation is: (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:53:52,097 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2023-11-06 22:53:52,097 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1)) [2023-11-06 22:53:52,097 INFO L899 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2023-11-06 22:53:52,097 INFO L899 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2023-11-06 22:53:52,099 INFO L895 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1)) [2023-11-06 22:53:52,099 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 265 279) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1)) [2023-11-06 22:53:52,099 INFO L895 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1)) [2023-11-06 22:53:52,100 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2023-11-06 22:53:52,100 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 683 691) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:53:52,100 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-06 22:53:52,101 INFO L899 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2023-11-06 22:53:52,101 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 839 850) no Hoare annotation was computed. [2023-11-06 22:53:52,101 INFO L899 garLoopResultBuilder]: For program point L843-1(lines 839 850) no Hoare annotation was computed. [2023-11-06 22:53:52,101 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 839 850) the Hoare annotation is: true [2023-11-06 22:53:52,104 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 22:53:52,106 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:53:52,148 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:53:52 BoogieIcfgContainer [2023-11-06 22:53:52,148 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:53:52,149 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:53:52,149 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:53:52,149 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:53:52,150 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:53:49" (3/4) ... [2023-11-06 22:53:52,152 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:53:52,156 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:53:52,156 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:53:52,156 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:53:52,157 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:53:52,157 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:53:52,157 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:53:52,157 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:53:52,165 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 16 nodes and edges [2023-11-06 22:53:52,165 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:53:52,166 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:53:52,167 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:53:52,167 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:53:52,195 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,196 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,196 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:53:52,197 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,197 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 22:53:52,198 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:53:52,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:53:52,200 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:53:52,200 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,228 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,229 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,229 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:53:52,229 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,230 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 22:53:52,230 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:53:52,230 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:53:52,231 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,231 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:53:52,231 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:53:52,231 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:53:52,246 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:53:52,246 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:53:52,247 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:53:52,247 INFO L158 Benchmark]: Toolchain (without parser) took 3380.55ms. Allocated memory is still 178.3MB. Free memory was 139.1MB in the beginning and 73.9MB in the end (delta: 65.3MB). Peak memory consumption was 66.9MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,248 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 178.3MB. Free memory is still 152.9MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:53:52,248 INFO L158 Benchmark]: CACSL2BoogieTranslator took 464.40ms. Allocated memory is still 178.3MB. Free memory was 138.7MB in the beginning and 119.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,249 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.84ms. Allocated memory is still 178.3MB. Free memory was 119.8MB in the beginning and 117.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,249 INFO L158 Benchmark]: Boogie Preprocessor took 31.75ms. Allocated memory is still 178.3MB. Free memory was 117.7MB in the beginning and 116.5MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:53:52,249 INFO L158 Benchmark]: RCFGBuilder took 530.26ms. Allocated memory is still 178.3MB. Free memory was 116.5MB in the beginning and 101.4MB in the end (delta: 15.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,250 INFO L158 Benchmark]: TraceAbstraction took 2195.77ms. Allocated memory is still 178.3MB. Free memory was 100.5MB in the beginning and 80.2MB in the end (delta: 20.3MB). Peak memory consumption was 22.9MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,250 INFO L158 Benchmark]: Witness Printer took 98.18ms. Allocated memory is still 178.3MB. Free memory was 80.2MB in the beginning and 73.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:53:52,252 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 178.3MB. Free memory is still 152.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 464.40ms. Allocated memory is still 178.3MB. Free memory was 138.7MB in the beginning and 119.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.84ms. Allocated memory is still 178.3MB. Free memory was 119.8MB in the beginning and 117.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.75ms. Allocated memory is still 178.3MB. Free memory was 117.7MB in the beginning and 116.5MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 530.26ms. Allocated memory is still 178.3MB. Free memory was 116.5MB in the beginning and 101.4MB in the end (delta: 15.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 2195.77ms. Allocated memory is still 178.3MB. Free memory was 100.5MB in the beginning and 80.2MB in the end (delta: 20.3MB). Peak memory consumption was 22.9MB. Max. memory is 16.1GB. * Witness Printer took 98.18ms. Allocated memory is still 178.3MB. Free memory was 80.2MB in the beginning and 73.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49] - GenericResultAtLocation [Line: 124]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [124] - GenericResultAtLocation [Line: 288]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [288] - GenericResultAtLocation [Line: 654]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [654] - GenericResultAtLocation [Line: 692]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [692] - GenericResultAtLocation [Line: 701]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [701] - GenericResultAtLocation [Line: 797]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [797] - GenericResultAtLocation [Line: 823]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [823] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 697]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 80 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.1s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 198 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 194 mSDsluCounter, 645 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 332 mSDsCounter, 22 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 29 IncrementalHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 22 mSolverCounterUnsat, 313 mSDtfsCounter, 29 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=101occurred in iteration=3, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 185 PreInvPairs, 215 NumberOfFragments, 224 HoareAnnotationTreeSize, 185 FomulaSimplifications, 42 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 37 FomulaSimplificationsInter, 316 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 108 NumberOfCodeBlocks, 108 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 104 ConstructedInterpolants, 0 QuantifiedInterpolants, 178 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 757]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 693]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 713]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && !((0 == systemActive))) - InvariantResult [Line: 683]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 798]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 676]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && !((0 == systemActive))) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 764]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:53:52,288 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa3a4bc0-4c30-4002-8caa-0c1911edb9ea/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE