./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3364c65adf57fef4e6e40e7680894e092c8fbf29e459121c70f90a68103ac5cb --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:45:50,809 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:45:50,943 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:45:50,951 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:45:50,952 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:45:50,996 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:45:50,997 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:45:50,998 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:45:50,999 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:45:51,005 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:45:51,006 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:45:51,007 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:45:51,008 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:45:51,010 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:45:51,010 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:45:51,011 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:45:51,011 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:45:51,012 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:45:51,012 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:45:51,013 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:45:51,013 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:45:51,014 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:45:51,015 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:45:51,015 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:45:51,016 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:45:51,017 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:45:51,017 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:45:51,018 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:45:51,018 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:45:51,019 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:45:51,020 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:45:51,021 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:45:51,021 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:45:51,021 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:45:51,022 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:45:51,022 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:45:51,022 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:45:51,023 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:45:51,023 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:45:51,023 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3364c65adf57fef4e6e40e7680894e092c8fbf29e459121c70f90a68103ac5cb [2023-11-06 22:45:51,365 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:45:51,402 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:45:51,405 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:45:51,407 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:45:51,408 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:45:51,409 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c [2023-11-06 22:45:54,701 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:45:54,965 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:45:54,966 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c [2023-11-06 22:45:54,983 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/data/4a462e5ab/3986d4f4adcf4a5babb271b271c68993/FLAG0ea3f387a [2023-11-06 22:45:55,003 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/data/4a462e5ab/3986d4f4adcf4a5babb271b271c68993 [2023-11-06 22:45:55,009 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:45:55,011 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:45:55,013 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:45:55,013 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:45:55,020 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:45:55,021 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,022 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@726cd943 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55, skipping insertion in model container [2023-11-06 22:45:55,023 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,107 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:45:55,386 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c[11828,11841] [2023-11-06 22:45:55,431 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:45:55,448 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:45:55,465 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-06 22:45:55,467 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] [2023-11-06 22:45:55,468 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [453] [2023-11-06 22:45:55,468 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [462] [2023-11-06 22:45:55,468 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [548] [2023-11-06 22:45:55,469 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [649] [2023-11-06 22:45:55,469 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] [2023-11-06 22:45:55,469 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [897] [2023-11-06 22:45:55,566 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c[11828,11841] [2023-11-06 22:45:55,600 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:45:55,638 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:45:55,639 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55 WrapperNode [2023-11-06 22:45:55,640 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:45:55,645 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:45:55,645 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:45:55,646 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:45:55,654 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,671 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,700 INFO L138 Inliner]: procedures = 54, calls = 98, calls flagged for inlining = 20, calls inlined = 16, statements flattened = 153 [2023-11-06 22:45:55,700 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:45:55,701 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:45:55,702 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:45:55,702 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:45:55,716 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,716 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,721 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,721 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,729 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,744 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,746 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,748 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,751 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:45:55,752 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:45:55,752 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:45:55,753 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:45:55,754 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (1/1) ... [2023-11-06 22:45:55,768 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:45:55,788 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:45:55,804 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:45:55,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:45:55,861 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:45:55,861 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:45:55,861 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:45:55,862 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:45:55,864 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:45:55,865 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:45:55,866 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:45:55,866 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:45:55,866 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:45:55,866 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:45:55,867 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:45:55,867 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:45:55,867 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:45:55,867 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:45:55,867 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:45:55,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:45:55,868 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:45:55,869 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:45:55,869 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:45:55,869 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:45:56,026 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:45:56,029 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:45:56,363 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:45:56,373 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:45:56,374 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:45:56,376 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:56 BoogieIcfgContainer [2023-11-06 22:45:56,377 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:45:56,380 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:45:56,380 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:45:56,384 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:45:56,385 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:45:55" (1/3) ... [2023-11-06 22:45:56,385 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36f21f67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:45:56, skipping insertion in model container [2023-11-06 22:45:56,386 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:45:55" (2/3) ... [2023-11-06 22:45:56,386 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36f21f67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:45:56, skipping insertion in model container [2023-11-06 22:45:56,386 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:56" (3/3) ... [2023-11-06 22:45:56,388 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product16.cil.c [2023-11-06 22:45:56,410 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:45:56,410 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:45:56,477 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:45:56,486 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@781954c7, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:45:56,487 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:45:56,493 INFO L276 IsEmpty]: Start isEmpty. Operand has 86 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 70 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:45:56,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:45:56,510 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:56,511 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:56,511 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:56,518 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:56,518 INFO L85 PathProgramCache]: Analyzing trace with hash 265998247, now seen corresponding path program 1 times [2023-11-06 22:45:56,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:56,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177060565] [2023-11-06 22:45:56,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:56,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:56,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:45:56,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:56,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:56,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:56,752 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177060565] [2023-11-06 22:45:56,753 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177060565] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:56,753 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:56,754 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:45:56,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [806341144] [2023-11-06 22:45:56,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:56,762 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:45:56,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:56,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:45:56,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:45:56,800 INFO L87 Difference]: Start difference. First operand has 86 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 70 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:56,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:56,838 INFO L93 Difference]: Finished difference Result 163 states and 218 transitions. [2023-11-06 22:45:56,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:45:56,841 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:45:56,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:56,850 INFO L225 Difference]: With dead ends: 163 [2023-11-06 22:45:56,850 INFO L226 Difference]: Without dead ends: 77 [2023-11-06 22:45:56,855 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:45:56,859 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:56,861 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:56,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2023-11-06 22:45:56,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2023-11-06 22:45:56,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 56 states have (on average 1.2857142857142858) internal successors, (72), 62 states have internal predecessors, (72), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:45:56,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 97 transitions. [2023-11-06 22:45:56,935 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 97 transitions. Word has length 25 [2023-11-06 22:45:56,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:56,936 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 97 transitions. [2023-11-06 22:45:56,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:56,937 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 97 transitions. [2023-11-06 22:45:56,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:45:56,940 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:56,940 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:56,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:45:56,940 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:56,941 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:56,941 INFO L85 PathProgramCache]: Analyzing trace with hash -1379017056, now seen corresponding path program 1 times [2023-11-06 22:45:56,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:56,942 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56244979] [2023-11-06 22:45:56,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:56,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:56,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:45:57,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:57,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:57,192 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56244979] [2023-11-06 22:45:57,193 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56244979] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:57,193 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:57,193 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:45:57,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2059986175] [2023-11-06 22:45:57,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:57,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:45:57,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:57,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:45:57,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:57,198 INFO L87 Difference]: Start difference. First operand 77 states and 97 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:57,261 INFO L93 Difference]: Finished difference Result 114 states and 142 transitions. [2023-11-06 22:45:57,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:45:57,276 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:45:57,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:57,278 INFO L225 Difference]: With dead ends: 114 [2023-11-06 22:45:57,278 INFO L226 Difference]: Without dead ends: 68 [2023-11-06 22:45:57,279 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:57,281 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 17 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:57,282 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 146 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:57,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-11-06 22:45:57,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68. [2023-11-06 22:45:57,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 50 states have (on average 1.3) internal successors, (65), 56 states have internal predecessors, (65), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:45:57,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 85 transitions. [2023-11-06 22:45:57,338 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 85 transitions. Word has length 26 [2023-11-06 22:45:57,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:57,338 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 85 transitions. [2023-11-06 22:45:57,339 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,339 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 85 transitions. [2023-11-06 22:45:57,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:45:57,341 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:57,341 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:57,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:45:57,342 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:57,342 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:57,342 INFO L85 PathProgramCache]: Analyzing trace with hash -969984948, now seen corresponding path program 1 times [2023-11-06 22:45:57,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:57,343 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [142522167] [2023-11-06 22:45:57,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:57,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:57,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:45:57,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:57,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:57,484 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [142522167] [2023-11-06 22:45:57,484 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [142522167] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:57,484 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:57,484 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:45:57,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1320916437] [2023-11-06 22:45:57,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:57,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:45:57,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:57,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:45:57,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:57,487 INFO L87 Difference]: Start difference. First operand 68 states and 85 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:57,533 INFO L93 Difference]: Finished difference Result 186 states and 238 transitions. [2023-11-06 22:45:57,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:45:57,534 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:45:57,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:57,537 INFO L225 Difference]: With dead ends: 186 [2023-11-06 22:45:57,537 INFO L226 Difference]: Without dead ends: 126 [2023-11-06 22:45:57,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:45:57,540 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 62 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:57,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 171 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:57,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2023-11-06 22:45:57,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123. [2023-11-06 22:45:57,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 99 states have internal predecessors, (117), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 15 states have call predecessors, (20), 20 states have call successors, (20) [2023-11-06 22:45:57,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 157 transitions. [2023-11-06 22:45:57,577 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 157 transitions. Word has length 31 [2023-11-06 22:45:57,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:57,578 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 157 transitions. [2023-11-06 22:45:57,578 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,578 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 157 transitions. [2023-11-06 22:45:57,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:45:57,581 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:45:57,581 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:45:57,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:45:57,581 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:45:57,582 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:45:57,582 INFO L85 PathProgramCache]: Analyzing trace with hash -1792730875, now seen corresponding path program 1 times [2023-11-06 22:45:57,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:45:57,583 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909713443] [2023-11-06 22:45:57,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:45:57,583 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:45:57,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:45:57,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:45:57,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:45:57,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:45:57,716 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909713443] [2023-11-06 22:45:57,716 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909713443] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:45:57,716 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:45:57,716 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:45:57,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477097598] [2023-11-06 22:45:57,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:45:57,717 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:45:57,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:45:57,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:45:57,718 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:45:57,719 INFO L87 Difference]: Start difference. First operand 123 states and 157 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:45:57,801 INFO L93 Difference]: Finished difference Result 208 states and 267 transitions. [2023-11-06 22:45:57,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:45:57,802 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:45:57,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:45:57,803 INFO L225 Difference]: With dead ends: 208 [2023-11-06 22:45:57,803 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:45:57,805 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:45:57,807 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 56 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:45:57,808 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 157 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:45:57,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:45:57,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:45:57,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:45:57,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:45:57,810 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2023-11-06 22:45:57,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:45:57,810 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:45:57,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:45:57,811 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:45:57,811 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:45:57,814 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:45:57,815 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:45:57,817 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:45:58,111 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 741 748) no Hoare annotation was computed. [2023-11-06 22:45:58,111 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 741 748) the Hoare annotation is: true [2023-11-06 22:45:58,111 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 741 748) no Hoare annotation was computed. [2023-11-06 22:45:58,112 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 495 506) the Hoare annotation is: true [2023-11-06 22:45:58,112 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 495 506) no Hoare annotation was computed. [2023-11-06 22:45:58,112 INFO L899 garLoopResultBuilder]: For program point L499-1(lines 495 506) no Hoare annotation was computed. [2023-11-06 22:45:58,112 INFO L899 garLoopResultBuilder]: For program point L919(lines 919 929) no Hoare annotation was computed. [2023-11-06 22:45:58,112 INFO L899 garLoopResultBuilder]: For program point L663-1(lines 662 681) no Hoare annotation was computed. [2023-11-06 22:45:58,113 INFO L899 garLoopResultBuilder]: For program point L915(lines 915 932) no Hoare annotation was computed. [2023-11-06 22:45:58,113 INFO L895 garLoopResultBuilder]: At program point L915-1(lines 907 935) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:45:58,113 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 659 682) no Hoare annotation was computed. [2023-11-06 22:45:58,113 INFO L895 garLoopResultBuilder]: At program point L705(line 705) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:45:58,114 INFO L895 garLoopResultBuilder]: At program point L701(line 701) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:45:58,114 INFO L895 garLoopResultBuilder]: At program point L697(line 697) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:45:58,114 INFO L899 garLoopResultBuilder]: For program point L697-1(line 697) no Hoare annotation was computed. [2023-11-06 22:45:58,114 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 926) no Hoare annotation was computed. [2023-11-06 22:45:58,114 INFO L899 garLoopResultBuilder]: For program point L458(line 458) no Hoare annotation was computed. [2023-11-06 22:45:58,115 INFO L895 garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:45:58,115 INFO L895 garLoopResultBuilder]: At program point L710-1(lines 691 715) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:45:58,115 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2023-11-06 22:45:58,115 INFO L895 garLoopResultBuilder]: At program point L475-2(lines 471 482) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:45:58,115 INFO L895 garLoopResultBuilder]: At program point L913(line 913) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:45:58,116 INFO L899 garLoopResultBuilder]: For program point L913-1(line 913) no Hoare annotation was computed. [2023-11-06 22:45:58,116 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 454 461) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:45:58,116 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 659 682) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:45:58,116 INFO L899 garLoopResultBuilder]: For program point L670-1(lines 670 676) no Hoare annotation was computed. [2023-11-06 22:45:58,116 INFO L899 garLoopResultBuilder]: For program point L699(lines 699 707) no Hoare annotation was computed. [2023-11-06 22:45:58,117 INFO L899 garLoopResultBuilder]: For program point L695(lines 695 712) no Hoare annotation was computed. [2023-11-06 22:45:58,117 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 659 682) no Hoare annotation was computed. [2023-11-06 22:45:58,117 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 760 768) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2023-11-06 22:45:58,117 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 458) no Hoare annotation was computed. [2023-11-06 22:45:58,117 INFO L902 garLoopResultBuilder]: At program point L576(lines 551 580) the Hoare annotation is: true [2023-11-06 22:45:58,118 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 551 580) no Hoare annotation was computed. [2023-11-06 22:45:58,118 INFO L899 garLoopResultBuilder]: For program point L572(line 572) no Hoare annotation was computed. [2023-11-06 22:45:58,118 INFO L899 garLoopResultBuilder]: For program point L565(lines 565 569) no Hoare annotation was computed. [2023-11-06 22:45:58,118 INFO L902 garLoopResultBuilder]: At program point L565-1(lines 565 569) the Hoare annotation is: true [2023-11-06 22:45:58,118 INFO L899 garLoopResultBuilder]: For program point L562(line 562) no Hoare annotation was computed. [2023-11-06 22:45:58,119 INFO L902 garLoopResultBuilder]: At program point L561-2(lines 561 575) the Hoare annotation is: true [2023-11-06 22:45:58,119 INFO L902 garLoopResultBuilder]: At program point L557(line 557) the Hoare annotation is: true [2023-11-06 22:45:58,119 INFO L899 garLoopResultBuilder]: For program point L557-1(line 557) no Hoare annotation was computed. [2023-11-06 22:45:58,119 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 551 580) the Hoare annotation is: true [2023-11-06 22:45:58,119 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 507 515) the Hoare annotation is: true [2023-11-06 22:45:58,120 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 507 515) no Hoare annotation was computed. [2023-11-06 22:45:58,120 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 507 515) no Hoare annotation was computed. [2023-11-06 22:45:58,120 INFO L895 garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,120 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 820 827) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,121 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,121 INFO L899 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2023-11-06 22:45:58,121 INFO L899 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2023-11-06 22:45:58,121 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 615 625) the Hoare annotation is: true [2023-11-06 22:45:58,121 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:45:58,122 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2023-11-06 22:45:58,122 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 626 648) the Hoare annotation is: true [2023-11-06 22:45:58,122 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:45:58,122 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:45:58,122 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 606 612) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:45:58,122 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2023-11-06 22:45:58,123 INFO L899 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2023-11-06 22:45:58,123 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:45:58,123 INFO L899 garLoopResultBuilder]: For program point L636(lines 636 643) no Hoare annotation was computed. [2023-11-06 22:45:58,123 INFO L902 garLoopResultBuilder]: At program point L892(lines 829 896) the Hoare annotation is: true [2023-11-06 22:45:58,123 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed. [2023-11-06 22:45:58,124 INFO L899 garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed. [2023-11-06 22:45:58,124 INFO L899 garLoopResultBuilder]: For program point L636-2(lines 636 643) no Hoare annotation was computed. [2023-11-06 22:45:58,124 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,124 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:45:58,124 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:45:58,125 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 899 906) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:45:58,125 INFO L895 garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false [2023-11-06 22:45:58,125 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 805 819) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,125 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2023-11-06 22:45:58,126 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:45:58,126 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: false [2023-11-06 22:45:58,126 INFO L895 garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:45:58,126 INFO L899 garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed. [2023-11-06 22:45:58,126 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed. [2023-11-06 22:45:58,127 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 483 494) no Hoare annotation was computed. [2023-11-06 22:45:58,127 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 483 494) the Hoare annotation is: true [2023-11-06 22:45:58,127 INFO L899 garLoopResultBuilder]: For program point L487-1(lines 483 494) no Hoare annotation was computed. [2023-11-06 22:45:58,127 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 683 689) no Hoare annotation was computed. [2023-11-06 22:45:58,127 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 683 689) the Hoare annotation is: true [2023-11-06 22:45:58,128 INFO L899 garLoopResultBuilder]: For program point L754-1(line 754) no Hoare annotation was computed. [2023-11-06 22:45:58,128 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 749 759) no Hoare annotation was computed. [2023-11-06 22:45:58,128 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 749 759) the Hoare annotation is: true [2023-11-06 22:45:58,128 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 749 759) no Hoare annotation was computed. [2023-11-06 22:45:58,128 INFO L902 garLoopResultBuilder]: At program point L754(line 754) the Hoare annotation is: true [2023-11-06 22:45:58,132 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 22:45:58,134 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:45:58,161 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:45:58 BoogieIcfgContainer [2023-11-06 22:45:58,161 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:45:58,162 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:45:58,162 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:45:58,162 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:45:58,163 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:45:56" (3/4) ... [2023-11-06 22:45:58,165 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:45:58,170 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:45:58,170 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:45:58,170 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:45:58,171 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:45:58,171 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:45:58,171 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:45:58,171 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:45:58,171 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:45:58,179 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:45:58,180 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:45:58,180 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:45:58,181 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:45:58,181 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:45:58,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:45:58,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:45:58,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:45:58,215 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:45:58,215 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:45:58,282 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:45:58,282 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:45:58,283 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:45:58,284 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:45:58,284 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:45:58,311 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:45:58,311 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:45:58,312 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:45:58,312 INFO L158 Benchmark]: Toolchain (without parser) took 3301.24ms. Allocated memory is still 182.5MB. Free memory was 135.2MB in the beginning and 87.2MB in the end (delta: 48.0MB). Peak memory consumption was 48.7MB. Max. memory is 16.1GB. [2023-11-06 22:45:58,313 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 182.5MB. Free memory is still 155.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:45:58,313 INFO L158 Benchmark]: CACSL2BoogieTranslator took 628.97ms. Allocated memory is still 182.5MB. Free memory was 135.0MB in the beginning and 116.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:45:58,314 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.11ms. Allocated memory is still 182.5MB. Free memory was 116.1MB in the beginning and 114.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:45:58,314 INFO L158 Benchmark]: Boogie Preprocessor took 49.78ms. Allocated memory is still 182.5MB. Free memory was 114.0MB in the beginning and 112.5MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:45:58,315 INFO L158 Benchmark]: RCFGBuilder took 624.69ms. Allocated memory is still 182.5MB. Free memory was 112.5MB in the beginning and 96.8MB in the end (delta: 15.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:45:58,315 INFO L158 Benchmark]: TraceAbstraction took 1781.41ms. Allocated memory is still 182.5MB. Free memory was 96.0MB in the beginning and 94.9MB in the end (delta: 1.1MB). Peak memory consumption was 456.3kB. Max. memory is 16.1GB. [2023-11-06 22:45:58,316 INFO L158 Benchmark]: Witness Printer took 149.98ms. Allocated memory is still 182.5MB. Free memory was 94.2MB in the beginning and 87.2MB in the end (delta: 7.0MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:45:58,318 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 182.5MB. Free memory is still 155.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 628.97ms. Allocated memory is still 182.5MB. Free memory was 135.0MB in the beginning and 116.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.11ms. Allocated memory is still 182.5MB. Free memory was 116.1MB in the beginning and 114.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 49.78ms. Allocated memory is still 182.5MB. Free memory was 114.0MB in the beginning and 112.5MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 624.69ms. Allocated memory is still 182.5MB. Free memory was 112.5MB in the beginning and 96.8MB in the end (delta: 15.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 1781.41ms. Allocated memory is still 182.5MB. Free memory was 96.0MB in the beginning and 94.9MB in the end (delta: 1.1MB). Peak memory consumption was 456.3kB. Max. memory is 16.1GB. * Witness Printer took 149.98ms. Allocated memory is still 182.5MB. Free memory was 94.2MB in the beginning and 87.2MB in the end (delta: 7.0MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [453] - GenericResultAtLocation [Line: 462]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [462] - GenericResultAtLocation [Line: 548]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [548] - GenericResultAtLocation [Line: 649]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [649] - GenericResultAtLocation [Line: 828]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] - GenericResultAtLocation [Line: 897]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [897] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 458]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 86 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 139 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 135 mSDsluCounter, 580 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 237 mSDsCounter, 6 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 21 IncrementalHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 6 mSolverCounterUnsat, 343 mSDtfsCounter, 21 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=123occurred in iteration=3, InterpolantAutomatonStates: 13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 191 PreInvPairs, 217 NumberOfFragments, 169 HoareAnnotationTreeSize, 191 FomulaSimplifications, 11 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 39 FomulaSimplificationsInter, 272 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 116 NumberOfCodeBlocks, 116 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 112 ConstructedInterpolants, 0 QuantifiedInterpolants, 168 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 805]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 606]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 626]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 760]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:45:58,343 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0022abf1-2930-4c2f-8156-51822c629e49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE