./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4ef00a1384831ff7ef4c918e957ad9d5bbb60c08f91b05efbf00076fbc049000 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:03:16,738 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:03:16,855 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:03:16,859 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:03:16,860 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:03:16,885 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:03:16,886 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:03:16,886 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:03:16,887 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:03:16,888 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:03:16,889 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:03:16,890 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:03:16,891 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:03:16,891 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:03:16,892 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:03:16,893 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:03:16,893 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:03:16,894 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:03:16,894 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:03:16,895 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:03:16,896 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:03:16,896 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:03:16,897 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:03:16,897 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:03:16,898 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:03:16,899 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:03:16,899 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:03:16,900 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:03:16,900 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:03:16,900 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:03:16,901 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:03:16,901 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:03:16,901 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:03:16,902 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:03:16,902 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:03:16,902 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:03:16,902 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:03:16,903 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:03:16,903 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:03:16,903 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4ef00a1384831ff7ef4c918e957ad9d5bbb60c08f91b05efbf00076fbc049000 [2023-11-06 22:03:17,208 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:03:17,255 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:03:17,258 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:03:17,259 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:03:17,260 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:03:17,261 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c [2023-11-06 22:03:20,401 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:03:20,728 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:03:20,744 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c [2023-11-06 22:03:20,763 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/data/0cc728540/7b6e92d22e5b4c0aa4784573cdf32973/FLAGbce7c0bc1 [2023-11-06 22:03:20,778 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/data/0cc728540/7b6e92d22e5b4c0aa4784573cdf32973 [2023-11-06 22:03:20,787 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:03:20,789 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:03:20,791 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:03:20,791 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:03:20,797 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:03:20,798 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:03:20" (1/1) ... [2023-11-06 22:03:20,799 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@51543a20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:20, skipping insertion in model container [2023-11-06 22:03:20,799 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:03:20" (1/1) ... [2023-11-06 22:03:20,865 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:03:21,126 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c[17451,17464] [2023-11-06 22:03:21,145 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:03:21,157 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:03:21,169 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-06 22:03:21,171 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [262] [2023-11-06 22:03:21,171 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [334] [2023-11-06 22:03:21,172 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [700] [2023-11-06 22:03:21,172 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [738] [2023-11-06 22:03:21,172 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [836] [2023-11-06 22:03:21,172 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [876] [2023-11-06 22:03:21,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [885] [2023-11-06 22:03:21,231 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/sv-benchmarks/c/product-lines/minepump_spec2_product24.cil.c[17451,17464] [2023-11-06 22:03:21,236 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:03:21,262 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:03:21,262 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21 WrapperNode [2023-11-06 22:03:21,263 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:03:21,264 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:03:21,264 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:03:21,264 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:03:21,272 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,296 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,327 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 194 [2023-11-06 22:03:21,328 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:03:21,328 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:03:21,329 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:03:21,329 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:03:21,339 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,339 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,342 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,342 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,349 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,355 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,357 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,358 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,361 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:03:21,362 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:03:21,363 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:03:21,363 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:03:21,364 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (1/1) ... [2023-11-06 22:03:21,382 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:03:21,398 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:03:21,441 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:03:21,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:03:21,483 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:03:21,484 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:03:21,484 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:03:21,484 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:03:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:03:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:03:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:03:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:03:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:03:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:03:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:03:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:03:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:03:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:03:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:03:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:03:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:03:21,490 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:03:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:03:21,491 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:03:21,613 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:03:21,617 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:03:21,934 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:03:21,951 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:03:21,951 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:03:21,954 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:03:21 BoogieIcfgContainer [2023-11-06 22:03:21,954 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:03:21,959 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:03:21,960 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:03:21,963 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:03:21,963 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:03:20" (1/3) ... [2023-11-06 22:03:21,964 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c0e7cb2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:03:21, skipping insertion in model container [2023-11-06 22:03:21,964 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:03:21" (2/3) ... [2023-11-06 22:03:21,965 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c0e7cb2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:03:21, skipping insertion in model container [2023-11-06 22:03:21,965 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:03:21" (3/3) ... [2023-11-06 22:03:21,966 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product24.cil.c [2023-11-06 22:03:21,987 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:03:21,987 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:03:22,088 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:03:22,095 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@52e9d11f, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:03:22,095 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:03:22,101 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 78 states have internal predecessors, (95), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:03:22,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:03:22,114 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:03:22,115 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:03:22,116 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:03:22,123 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:03:22,123 INFO L85 PathProgramCache]: Analyzing trace with hash 1705763640, now seen corresponding path program 1 times [2023-11-06 22:03:22,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:03:22,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884420334] [2023-11-06 22:03:22,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:03:22,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:03:22,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:03:22,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:03:22,384 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:03:22,385 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884420334] [2023-11-06 22:03:22,385 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884420334] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:03:22,385 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:03:22,386 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:03:22,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187670223] [2023-11-06 22:03:22,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:03:22,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:03:22,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:03:22,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:03:22,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:03:22,426 INFO L87 Difference]: Start difference. First operand has 94 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 78 states have internal predecessors, (95), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:22,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:03:22,463 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2023-11-06 22:03:22,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:03:22,465 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:03:22,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:03:22,475 INFO L225 Difference]: With dead ends: 179 [2023-11-06 22:03:22,475 INFO L226 Difference]: Without dead ends: 85 [2023-11-06 22:03:22,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:03:22,483 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:03:22,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:03:22,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2023-11-06 22:03:22,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2023-11-06 22:03:22,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 70 states have internal predecessors, (81), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:03:22,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2023-11-06 22:03:22,531 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2023-11-06 22:03:22,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:03:22,531 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2023-11-06 22:03:22,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:22,532 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2023-11-06 22:03:22,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:03:22,535 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:03:22,535 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:03:22,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:03:22,536 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:03:22,537 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:03:22,537 INFO L85 PathProgramCache]: Analyzing trace with hash 153807758, now seen corresponding path program 1 times [2023-11-06 22:03:22,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:03:22,537 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1518338686] [2023-11-06 22:03:22,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:03:22,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:03:22,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:03:22,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:03:22,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:03:22,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1518338686] [2023-11-06 22:03:22,715 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1518338686] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:03:22,715 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:03:22,715 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:03:22,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [957354603] [2023-11-06 22:03:22,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:03:22,717 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:03:22,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:03:22,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:03:22,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:03:22,719 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:22,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:03:22,756 INFO L93 Difference]: Finished difference Result 130 states and 168 transitions. [2023-11-06 22:03:22,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:03:22,756 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:03:22,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:03:22,758 INFO L225 Difference]: With dead ends: 130 [2023-11-06 22:03:22,759 INFO L226 Difference]: Without dead ends: 76 [2023-11-06 22:03:22,760 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:03:22,762 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 17 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:03:22,763 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 172 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:03:22,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-06 22:03:22,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-06 22:03:22,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 64 states have internal predecessors, (74), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:03:22,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2023-11-06 22:03:22,779 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2023-11-06 22:03:22,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:03:22,780 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2023-11-06 22:03:22,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:22,780 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2023-11-06 22:03:22,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:03:22,782 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:03:22,783 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:03:22,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:03:22,783 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:03:22,784 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:03:22,784 INFO L85 PathProgramCache]: Analyzing trace with hash -1290936219, now seen corresponding path program 1 times [2023-11-06 22:03:22,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:03:22,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95958006] [2023-11-06 22:03:22,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:03:22,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:03:22,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:03:22,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:22,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:03:22,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:03:22,930 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95958006] [2023-11-06 22:03:22,930 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95958006] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:03:22,931 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:03:22,931 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:03:22,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [593713002] [2023-11-06 22:03:22,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:03:22,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:03:22,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:03:22,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:03:22,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:03:22,933 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:22,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:03:22,987 INFO L93 Difference]: Finished difference Result 210 states and 277 transitions. [2023-11-06 22:03:22,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:03:22,993 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:03:22,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:03:22,996 INFO L225 Difference]: With dead ends: 210 [2023-11-06 22:03:22,996 INFO L226 Difference]: Without dead ends: 142 [2023-11-06 22:03:22,997 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:03:22,999 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 90 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:03:23,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 199 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:03:23,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142 states. [2023-11-06 22:03:23,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142 to 139. [2023-11-06 22:03:23,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 100 states have (on average 1.35) internal successors, (135), 115 states have internal predecessors, (135), 24 states have call successors, (24), 14 states have call predecessors, (24), 14 states have return successors, (24), 15 states have call predecessors, (24), 24 states have call successors, (24) [2023-11-06 22:03:23,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 183 transitions. [2023-11-06 22:03:23,060 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 183 transitions. Word has length 31 [2023-11-06 22:03:23,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:03:23,060 INFO L495 AbstractCegarLoop]: Abstraction has 139 states and 183 transitions. [2023-11-06 22:03:23,060 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:23,061 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 183 transitions. [2023-11-06 22:03:23,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:03:23,072 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:03:23,072 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:03:23,072 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:03:23,073 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:03:23,074 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:03:23,075 INFO L85 PathProgramCache]: Analyzing trace with hash -917206296, now seen corresponding path program 1 times [2023-11-06 22:03:23,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:03:23,075 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953263707] [2023-11-06 22:03:23,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:03:23,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:03:23,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:23,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:03:23,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:03:23,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:03:23,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:03:23,335 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953263707] [2023-11-06 22:03:23,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953263707] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:03:23,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:03:23,336 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:03:23,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57024743] [2023-11-06 22:03:23,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:03:23,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:03:23,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:03:23,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:03:23,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:03:23,338 INFO L87 Difference]: Start difference. First operand 139 states and 183 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:23,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:03:23,446 INFO L93 Difference]: Finished difference Result 234 states and 307 transitions. [2023-11-06 22:03:23,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:03:23,446 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:03:23,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:03:23,447 INFO L225 Difference]: With dead ends: 234 [2023-11-06 22:03:23,447 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:03:23,449 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:03:23,451 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 41 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:03:23,451 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 169 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:03:23,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:03:23,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:03:23,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:03:23,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:03:23,453 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34 [2023-11-06 22:03:23,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:03:23,453 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:03:23,454 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:03:23,454 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:03:23,454 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:03:23,456 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:03:23,457 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:03:23,467 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:03:23,955 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 156 163) no Hoare annotation was computed. [2023-11-06 22:03:23,956 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 156 163) the Hoare annotation is: true [2023-11-06 22:03:23,956 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 156 163) no Hoare annotation was computed. [2023-11-06 22:03:23,956 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2023-11-06 22:03:23,956 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2023-11-06 22:03:23,957 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 913 924) the Hoare annotation is: true [2023-11-06 22:03:23,957 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 913 924) no Hoare annotation was computed. [2023-11-06 22:03:23,957 INFO L899 garLoopResultBuilder]: For program point L917-1(lines 913 924) no Hoare annotation was computed. [2023-11-06 22:03:23,957 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 740 769) no Hoare annotation was computed. [2023-11-06 22:03:23,957 INFO L902 garLoopResultBuilder]: At program point L765(lines 740 769) the Hoare annotation is: true [2023-11-06 22:03:23,958 INFO L899 garLoopResultBuilder]: For program point L761(line 761) no Hoare annotation was computed. [2023-11-06 22:03:23,958 INFO L899 garLoopResultBuilder]: For program point L754(lines 754 758) no Hoare annotation was computed. [2023-11-06 22:03:23,958 INFO L902 garLoopResultBuilder]: At program point L754-1(lines 754 758) the Hoare annotation is: true [2023-11-06 22:03:23,958 INFO L899 garLoopResultBuilder]: For program point L751(line 751) no Hoare annotation was computed. [2023-11-06 22:03:23,958 INFO L902 garLoopResultBuilder]: At program point L750-2(lines 750 764) the Hoare annotation is: true [2023-11-06 22:03:23,959 INFO L902 garLoopResultBuilder]: At program point L746(line 746) the Hoare annotation is: true [2023-11-06 22:03:23,959 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 740 769) the Hoare annotation is: true [2023-11-06 22:03:23,959 INFO L899 garLoopResultBuilder]: For program point L746-1(line 746) no Hoare annotation was computed. [2023-11-06 22:03:23,959 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 925 933) the Hoare annotation is: true [2023-11-06 22:03:23,960 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 925 933) no Hoare annotation was computed. [2023-11-06 22:03:23,960 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 925 933) no Hoare annotation was computed. [2023-11-06 22:03:23,960 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,960 INFO L899 garLoopResultBuilder]: For program point L853-1(line 853) no Hoare annotation was computed. [2023-11-06 22:03:23,961 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2023-11-06 22:03:23,961 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2023-11-06 22:03:23,961 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2023-11-06 22:03:23,961 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2023-11-06 22:03:23,962 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,962 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2023-11-06 22:03:23,962 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 869) no Hoare annotation was computed. [2023-11-06 22:03:23,962 INFO L899 garLoopResultBuilder]: For program point L855(lines 855 872) no Hoare annotation was computed. [2023-11-06 22:03:23,962 INFO L895 garLoopResultBuilder]: At program point L855-1(lines 847 875) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,963 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 877 884) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,963 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 88) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,963 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,963 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,964 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 897) no Hoare annotation was computed. [2023-11-06 22:03:23,964 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 866) no Hoare annotation was computed. [2023-11-06 22:03:23,964 INFO L895 garLoopResultBuilder]: At program point L893-2(lines 889 900) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,965 INFO L899 garLoopResultBuilder]: For program point L881(line 881) no Hoare annotation was computed. [2023-11-06 22:03:23,965 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,965 INFO L895 garLoopResultBuilder]: At program point L142-1(lines 123 147) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,965 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-06 22:03:23,966 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2023-11-06 22:03:23,966 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 164 174) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,966 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 175 183) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2023-11-06 22:03:23,966 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 881) no Hoare annotation was computed. [2023-11-06 22:03:23,967 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 254 261) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,967 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 802 812) the Hoare annotation is: true [2023-11-06 22:03:23,967 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 715 721) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:03:23,967 INFO L902 garLoopResultBuilder]: At program point L329(lines 266 333) the Hoare annotation is: true [2023-11-06 22:03:23,968 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 813 835) the Hoare annotation is: true [2023-11-06 22:03:23,968 INFO L899 garLoopResultBuilder]: For program point L296(lines 296 302) no Hoare annotation was computed. [2023-11-06 22:03:23,968 INFO L899 garLoopResultBuilder]: For program point L296-1(lines 296 302) no Hoare annotation was computed. [2023-11-06 22:03:23,968 INFO L895 garLoopResultBuilder]: At program point L288(line 288) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,968 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:03:23,969 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:03:23,969 INFO L899 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2023-11-06 22:03:23,969 INFO L899 garLoopResultBuilder]: For program point L243-1(lines 243 249) no Hoare annotation was computed. [2023-11-06 22:03:23,969 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 794 800) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:03:23,970 INFO L895 garLoopResultBuilder]: At program point L326(lines 275 327) the Hoare annotation is: false [2023-11-06 22:03:23,970 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:03:23,970 INFO L899 garLoopResultBuilder]: For program point L314(lines 314 320) no Hoare annotation was computed. [2023-11-06 22:03:23,970 INFO L895 garLoopResultBuilder]: At program point L314-2(lines 306 321) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,970 INFO L899 garLoopResultBuilder]: For program point L277(lines 276 325) no Hoare annotation was computed. [2023-11-06 22:03:23,971 INFO L899 garLoopResultBuilder]: For program point L306(lines 306 321) no Hoare annotation was computed. [2023-11-06 22:03:23,971 INFO L895 garLoopResultBuilder]: At program point L298(line 298) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,971 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:03:23,971 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 722 728) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:03:23,972 INFO L895 garLoopResultBuilder]: At program point L323(lines 276 325) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,972 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 292) no Hoare annotation was computed. [2023-11-06 22:03:23,972 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 839 846) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:03:23,972 INFO L899 garLoopResultBuilder]: For program point L286-1(lines 286 292) no Hoare annotation was computed. [2023-11-06 22:03:23,972 INFO L899 garLoopResultBuilder]: For program point L823(lines 823 830) no Hoare annotation was computed. [2023-11-06 22:03:23,973 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 282) no Hoare annotation was computed. [2023-11-06 22:03:23,973 INFO L895 garLoopResultBuilder]: At program point L245(line 245) the Hoare annotation is: false [2023-11-06 22:03:23,973 INFO L899 garLoopResultBuilder]: For program point L823-2(lines 823 830) no Hoare annotation was computed. [2023-11-06 22:03:23,973 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 239 253) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:03:23,974 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 729 737) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 22:03:23,974 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 901 912) no Hoare annotation was computed. [2023-11-06 22:03:23,974 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 901 912) the Hoare annotation is: true [2023-11-06 22:03:23,974 INFO L899 garLoopResultBuilder]: For program point L905-1(lines 901 912) no Hoare annotation was computed. [2023-11-06 22:03:23,974 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,975 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2023-11-06 22:03:23,975 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 966 974) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,975 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 97 121) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:03:23,975 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 220 238) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,976 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2023-11-06 22:03:23,976 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,976 INFO L895 garLoopResultBuilder]: At program point L107(line 107) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:03:23,976 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2023-11-06 22:03:23,976 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2023-11-06 22:03:23,977 INFO L899 garLoopResultBuilder]: For program point L229(lines 229 233) no Hoare annotation was computed. [2023-11-06 22:03:23,977 INFO L899 garLoopResultBuilder]: For program point L229-2(lines 229 233) no Hoare annotation was computed. [2023-11-06 22:03:23,980 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 22:03:23,982 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:03:23,998 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:03:23 BoogieIcfgContainer [2023-11-06 22:03:24,004 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:03:24,005 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:03:24,005 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:03:24,006 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:03:24,006 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:03:21" (3/4) ... [2023-11-06 22:03:24,009 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:03:24,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:03:24,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:03:24,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:03:24,023 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:03:24,024 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:03:24,024 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:03:24,025 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:03:24,025 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:03:24,062 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,063 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:03:24,064 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:03:24,065 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,065 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:03:24,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,120 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,121 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:03:24,122 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:03:24,123 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,123 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 22:03:24,124 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,124 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,124 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:03:24,163 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:03:24,164 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:03:24,165 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:03:24,165 INFO L158 Benchmark]: Toolchain (without parser) took 3376.74ms. Allocated memory is still 163.6MB. Free memory was 116.7MB in the beginning and 112.4MB in the end (delta: 4.3MB). Peak memory consumption was 4.5MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,166 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 123.7MB. Free memory was 93.5MB in the beginning and 93.5MB in the end (delta: 24.3kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:03:24,166 INFO L158 Benchmark]: CACSL2BoogieTranslator took 471.81ms. Allocated memory is still 163.6MB. Free memory was 116.1MB in the beginning and 97.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,166 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.08ms. Allocated memory is still 163.6MB. Free memory was 97.2MB in the beginning and 94.9MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,167 INFO L158 Benchmark]: Boogie Preprocessor took 33.38ms. Allocated memory is still 163.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,168 INFO L158 Benchmark]: RCFGBuilder took 591.52ms. Allocated memory is still 163.6MB. Free memory was 93.0MB in the beginning and 76.7MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,168 INFO L158 Benchmark]: TraceAbstraction took 2045.14ms. Allocated memory is still 163.6MB. Free memory was 76.1MB in the beginning and 119.8MB in the end (delta: -43.7MB). Peak memory consumption was 21.2MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,169 INFO L158 Benchmark]: Witness Printer took 159.73ms. Allocated memory is still 163.6MB. Free memory was 119.8MB in the beginning and 112.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:03:24,172 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 123.7MB. Free memory was 93.5MB in the beginning and 93.5MB in the end (delta: 24.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 471.81ms. Allocated memory is still 163.6MB. Free memory was 116.1MB in the beginning and 97.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.08ms. Allocated memory is still 163.6MB. Free memory was 97.2MB in the beginning and 94.9MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.38ms. Allocated memory is still 163.6MB. Free memory was 94.9MB in the beginning and 93.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 591.52ms. Allocated memory is still 163.6MB. Free memory was 93.0MB in the beginning and 76.7MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 2045.14ms. Allocated memory is still 163.6MB. Free memory was 76.1MB in the beginning and 119.8MB in the end (delta: -43.7MB). Peak memory consumption was 21.2MB. Max. memory is 16.1GB. * Witness Printer took 159.73ms. Allocated memory is still 163.6MB. Free memory was 119.8MB in the beginning and 112.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 262]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [262] - GenericResultAtLocation [Line: 334]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [334] - GenericResultAtLocation [Line: 700]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [700] - GenericResultAtLocation [Line: 738]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [738] - GenericResultAtLocation [Line: 836]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [836] - GenericResultAtLocation [Line: 876]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [876] - GenericResultAtLocation [Line: 885]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [885] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 881]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.9s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 152 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 148 mSDsluCounter, 659 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 271 mSDsCounter, 5 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 24 IncrementalHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5 mSolverCounterUnsat, 388 mSDtfsCounter, 24 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=139occurred in iteration=3, InterpolantAutomatonStates: 13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 268 PreInvPairs, 294 NumberOfFragments, 203 HoareAnnotationTreeSize, 268 FomulaSimplifications, 11 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 44 FomulaSimplificationsInter, 356 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.6s InterpolantComputationTime, 116 NumberOfCodeBlocks, 116 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 112 ConstructedInterpolants, 0 QuantifiedInterpolants, 180 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 966]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 254]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) - InvariantResult [Line: 877]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 729]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 847]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 740]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:03:24,233 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_88161676-beeb-4fad-94a4-e72cfc4fcb4c/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE