./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d2b18f8936761d8846ee25b456ed772fff798460a5a47e80881faf00ea0dfef9 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:11:26,935 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:11:27,085 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:11:27,096 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:11:27,097 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:11:27,147 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:11:27,148 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:11:27,149 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:11:27,151 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:11:27,158 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:11:27,164 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:11:27,165 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:11:27,166 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:11:27,168 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:11:27,169 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:11:27,169 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:11:27,170 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:11:27,171 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:11:27,171 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:11:27,172 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:11:27,173 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:11:27,173 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:11:27,174 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:11:27,176 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:11:27,177 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:11:27,178 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:11:27,179 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:11:27,180 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:11:27,180 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:11:27,181 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:11:27,183 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:11:27,183 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:11:27,184 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:11:27,184 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:11:27,184 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:11:27,185 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:11:27,185 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:11:27,185 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:11:27,186 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:11:27,186 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d2b18f8936761d8846ee25b456ed772fff798460a5a47e80881faf00ea0dfef9 [2023-11-06 23:11:27,501 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:11:27,542 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:11:27,546 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:11:27,548 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:11:27,549 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:11:27,551 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c [2023-11-06 23:11:31,200 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:11:31,557 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:11:31,558 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c [2023-11-06 23:11:31,590 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/data/f95c07980/bc359c99725641e4a1d39dda9bfcc245/FLAGb03e32c14 [2023-11-06 23:11:31,610 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/data/f95c07980/bc359c99725641e4a1d39dda9bfcc245 [2023-11-06 23:11:31,614 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:11:31,616 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:11:31,618 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:11:31,618 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:11:31,626 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:11:31,627 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:11:31" (1/1) ... [2023-11-06 23:11:31,628 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6fb82980 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:31, skipping insertion in model container [2023-11-06 23:11:31,629 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:11:31" (1/1) ... [2023-11-06 23:11:31,691 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:11:32,057 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c[18283,18296] [2023-11-06 23:11:32,062 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:11:32,078 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:11:32,091 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 23:11:32,093 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [415] [2023-11-06 23:11:32,093 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [457] [2023-11-06 23:11:32,094 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [552] [2023-11-06 23:11:32,094 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [655] [2023-11-06 23:11:32,094 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [723] [2023-11-06 23:11:32,095 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [758] [2023-11-06 23:11:32,095 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [945] [2023-11-06 23:11:32,191 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/sv-benchmarks/c/product-lines/minepump_spec2_product27.cil.c[18283,18296] [2023-11-06 23:11:32,192 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:11:32,220 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:11:32,221 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32 WrapperNode [2023-11-06 23:11:32,221 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:11:32,222 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:11:32,223 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:11:32,223 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:11:32,231 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,249 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,290 INFO L138 Inliner]: procedures = 55, calls = 98, calls flagged for inlining = 22, calls inlined = 17, statements flattened = 171 [2023-11-06 23:11:32,290 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:11:32,291 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:11:32,291 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:11:32,292 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:11:32,311 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,312 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,320 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,332 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,340 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,347 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,349 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,351 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,355 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:11:32,368 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:11:32,372 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:11:32,372 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:11:32,373 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (1/1) ... [2023-11-06 23:11:32,384 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:11:32,399 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:11:32,415 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:11:32,440 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:11:32,477 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:11:32,478 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:11:32,478 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:11:32,478 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:11:32,481 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:11:32,481 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:11:32,483 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:11:32,483 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 23:11:32,483 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 23:11:32,483 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:11:32,484 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:11:32,484 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 23:11:32,484 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 23:11:32,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:11:32,485 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:11:32,485 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:11:32,486 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:11:32,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:11:32,653 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:11:32,656 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:11:33,072 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:11:33,080 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:11:33,081 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:11:33,084 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:11:33 BoogieIcfgContainer [2023-11-06 23:11:33,084 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:11:33,087 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:11:33,087 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:11:33,091 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:11:33,092 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:11:31" (1/3) ... [2023-11-06 23:11:33,093 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c81bbd7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:11:33, skipping insertion in model container [2023-11-06 23:11:33,093 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:11:32" (2/3) ... [2023-11-06 23:11:33,094 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2c81bbd7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:11:33, skipping insertion in model container [2023-11-06 23:11:33,094 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:11:33" (3/3) ... [2023-11-06 23:11:33,096 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product27.cil.c [2023-11-06 23:11:33,121 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:11:33,121 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:11:33,186 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:11:33,194 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ca7eac8, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:11:33,195 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:11:33,200 INFO L276 IsEmpty]: Start isEmpty. Operand has 82 states, 62 states have (on average 1.3870967741935485) internal successors, (86), 69 states have internal predecessors, (86), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 23:11:33,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 23:11:33,211 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:11:33,212 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:11:33,212 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:11:33,218 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:11:33,218 INFO L85 PathProgramCache]: Analyzing trace with hash 116265818, now seen corresponding path program 1 times [2023-11-06 23:11:33,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:11:33,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204350827] [2023-11-06 23:11:33,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:11:33,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:11:33,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:33,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 23:11:33,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:33,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:11:33,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:11:33,506 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204350827] [2023-11-06 23:11:33,507 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204350827] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:11:33,508 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:11:33,508 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:11:33,510 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115713573] [2023-11-06 23:11:33,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:11:33,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:11:33,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:11:33,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:11:33,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:11:33,555 INFO L87 Difference]: Start difference. First operand has 82 states, 62 states have (on average 1.3870967741935485) internal successors, (86), 69 states have internal predecessors, (86), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:33,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:11:33,630 INFO L93 Difference]: Finished difference Result 155 states and 210 transitions. [2023-11-06 23:11:33,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:11:33,633 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 23:11:33,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:11:33,644 INFO L225 Difference]: With dead ends: 155 [2023-11-06 23:11:33,644 INFO L226 Difference]: Without dead ends: 73 [2023-11-06 23:11:33,648 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:11:33,652 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:11:33,654 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:11:33,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2023-11-06 23:11:33,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2023-11-06 23:11:33,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 55 states have (on average 1.309090909090909) internal successors, (72), 61 states have internal predecessors, (72), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 23:11:33,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2023-11-06 23:11:33,715 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 25 [2023-11-06 23:11:33,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:11:33,716 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2023-11-06 23:11:33,717 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:33,719 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2023-11-06 23:11:33,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 23:11:33,723 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:11:33,723 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:11:33,724 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:11:33,724 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:11:33,726 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:11:33,726 INFO L85 PathProgramCache]: Analyzing trace with hash -1218551415, now seen corresponding path program 1 times [2023-11-06 23:11:33,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:11:33,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741971630] [2023-11-06 23:11:33,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:11:33,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:11:33,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:33,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 23:11:33,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:33,969 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:11:33,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:11:33,969 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741971630] [2023-11-06 23:11:33,970 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741971630] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:11:33,970 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:11:33,970 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:11:33,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [688247444] [2023-11-06 23:11:33,971 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:11:33,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:11:33,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:11:33,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:11:33,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:11:33,974 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:34,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:11:34,007 INFO L93 Difference]: Finished difference Result 107 states and 135 transitions. [2023-11-06 23:11:34,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:11:34,012 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 23:11:34,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:11:34,014 INFO L225 Difference]: With dead ends: 107 [2023-11-06 23:11:34,014 INFO L226 Difference]: Without dead ends: 64 [2023-11-06 23:11:34,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:11:34,017 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 16 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:11:34,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 139 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:11:34,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-06 23:11:34,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-06 23:11:34,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 49 states have (on average 1.3265306122448979) internal successors, (65), 55 states have internal predecessors, (65), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-06 23:11:34,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 81 transitions. [2023-11-06 23:11:34,044 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 81 transitions. Word has length 26 [2023-11-06 23:11:34,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:11:34,046 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 81 transitions. [2023-11-06 23:11:34,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:34,047 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 81 transitions. [2023-11-06 23:11:34,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 23:11:34,049 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:11:34,050 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:11:34,050 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:11:34,050 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:11:34,051 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:11:34,054 INFO L85 PathProgramCache]: Analyzing trace with hash 603258873, now seen corresponding path program 1 times [2023-11-06 23:11:34,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:11:34,055 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857322159] [2023-11-06 23:11:34,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:11:34,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:11:34,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:34,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 23:11:34,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:34,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:11:34,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:11:34,211 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857322159] [2023-11-06 23:11:34,212 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857322159] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:11:34,212 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:11:34,212 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:11:34,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000632822] [2023-11-06 23:11:34,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:11:34,213 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:11:34,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:11:34,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:11:34,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:11:34,215 INFO L87 Difference]: Start difference. First operand 64 states and 81 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:34,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:11:34,465 INFO L93 Difference]: Finished difference Result 218 states and 284 transitions. [2023-11-06 23:11:34,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:11:34,466 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 23:11:34,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:11:34,477 INFO L225 Difference]: With dead ends: 218 [2023-11-06 23:11:34,477 INFO L226 Difference]: Without dead ends: 162 [2023-11-06 23:11:34,485 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:11:34,487 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 214 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 214 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:11:34,488 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [214 Valid, 380 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:11:34,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2023-11-06 23:11:34,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2023-11-06 23:11:34,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 117 states have (on average 1.3675213675213675) internal successors, (160), 131 states have internal predecessors, (160), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2023-11-06 23:11:34,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 203 transitions. [2023-11-06 23:11:34,580 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 203 transitions. Word has length 30 [2023-11-06 23:11:34,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:11:34,581 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 203 transitions. [2023-11-06 23:11:34,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:11:34,581 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 203 transitions. [2023-11-06 23:11:34,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-06 23:11:34,584 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:11:34,584 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:11:34,584 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:11:34,585 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:11:34,585 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:11:34,586 INFO L85 PathProgramCache]: Analyzing trace with hash -820315312, now seen corresponding path program 1 times [2023-11-06 23:11:34,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:11:34,586 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734081501] [2023-11-06 23:11:34,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:11:34,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:11:34,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:34,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 23:11:34,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:34,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 23:11:34,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:11:34,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:11:34,853 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:11:34,854 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734081501] [2023-11-06 23:11:34,854 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734081501] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:11:34,854 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:11:34,854 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:11:34,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700037559] [2023-11-06 23:11:34,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:11:34,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:11:34,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:11:34,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:11:34,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:11:34,864 INFO L87 Difference]: Start difference. First operand 156 states and 203 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:11:34,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:11:34,951 INFO L93 Difference]: Finished difference Result 276 states and 362 transitions. [2023-11-06 23:11:34,952 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 23:11:34,954 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 35 [2023-11-06 23:11:34,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:11:34,955 INFO L225 Difference]: With dead ends: 276 [2023-11-06 23:11:34,955 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:11:34,958 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:11:34,970 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 36 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:11:34,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 154 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:11:34,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:11:34,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:11:34,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:11:34,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:11:34,979 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 35 [2023-11-06 23:11:34,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:11:34,979 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:11:34,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:11:34,980 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:11:34,981 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:11:34,985 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:11:34,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:11:34,989 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:11:35,498 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 847 854) no Hoare annotation was computed. [2023-11-06 23:11:35,499 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 847 854) the Hoare annotation is: true [2023-11-06 23:11:35,501 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 847 854) no Hoare annotation was computed. [2023-11-06 23:11:35,502 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 788 794) no Hoare annotation was computed. [2023-11-06 23:11:35,502 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 788 794) the Hoare annotation is: true [2023-11-06 23:11:35,502 INFO L899 garLoopResultBuilder]: For program point L494-1(lines 490 501) no Hoare annotation was computed. [2023-11-06 23:11:35,502 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 490 501) the Hoare annotation is: true [2023-11-06 23:11:35,502 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 490 501) no Hoare annotation was computed. [2023-11-06 23:11:35,503 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 450) no Hoare annotation was computed. [2023-11-06 23:11:35,503 INFO L899 garLoopResultBuilder]: For program point L436(lines 436 453) no Hoare annotation was computed. [2023-11-06 23:11:35,503 INFO L895 garLoopResultBuilder]: At program point L436-1(lines 428 456) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:11:35,504 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 543 551) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,504 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 764 787) no Hoare annotation was computed. [2023-11-06 23:11:35,504 INFO L899 garLoopResultBuilder]: For program point L775-1(lines 775 781) no Hoare annotation was computed. [2023-11-06 23:11:35,504 INFO L899 garLoopResultBuilder]: For program point L804(lines 804 812) no Hoare annotation was computed. [2023-11-06 23:11:35,507 INFO L899 garLoopResultBuilder]: For program point L800(lines 800 817) no Hoare annotation was computed. [2023-11-06 23:11:35,507 INFO L899 garLoopResultBuilder]: For program point L441(lines 441 447) no Hoare annotation was computed. [2023-11-06 23:11:35,507 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2023-11-06 23:11:35,508 INFO L899 garLoopResultBuilder]: For program point L470(lines 470 474) no Hoare annotation was computed. [2023-11-06 23:11:35,509 INFO L899 garLoopResultBuilder]: For program point L920-2(lines 920 924) no Hoare annotation was computed. [2023-11-06 23:11:35,509 INFO L895 garLoopResultBuilder]: At program point L470-2(lines 466 477) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,509 INFO L899 garLoopResultBuilder]: For program point L768-1(lines 767 786) no Hoare annotation was computed. [2023-11-06 23:11:35,509 INFO L899 garLoopResultBuilder]: For program point L950(line 950) no Hoare annotation was computed. [2023-11-06 23:11:35,509 INFO L895 garLoopResultBuilder]: At program point L434(line 434) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:11:35,510 INFO L899 garLoopResultBuilder]: For program point L434-1(line 434) no Hoare annotation was computed. [2023-11-06 23:11:35,510 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,510 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 946 953) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,510 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 764 787) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:11:35,510 INFO L895 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,511 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 911 929) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:11:35,511 INFO L895 garLoopResultBuilder]: At program point L815(line 815) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 23:11:35,513 INFO L895 garLoopResultBuilder]: At program point L815-1(lines 796 820) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 23:11:35,513 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 764 787) no Hoare annotation was computed. [2023-11-06 23:11:35,513 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 866 874) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0))) [2023-11-06 23:11:35,514 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 950) no Hoare annotation was computed. [2023-11-06 23:11:35,514 INFO L899 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2023-11-06 23:11:35,514 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2023-11-06 23:11:35,514 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2023-11-06 23:11:35,515 INFO L902 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2023-11-06 23:11:35,515 INFO L899 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2023-11-06 23:11:35,515 INFO L902 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2023-11-06 23:11:35,515 INFO L902 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2023-11-06 23:11:35,516 INFO L899 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2023-11-06 23:11:35,517 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 555 584) the Hoare annotation is: true [2023-11-06 23:11:35,520 INFO L902 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2023-11-06 23:11:35,521 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 502 510) the Hoare annotation is: true [2023-11-06 23:11:35,521 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 502 510) no Hoare annotation was computed. [2023-11-06 23:11:35,521 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 502 510) no Hoare annotation was computed. [2023-11-06 23:11:35,521 INFO L899 garLoopResultBuilder]: For program point L642-2(lines 642 649) no Hoare annotation was computed. [2023-11-06 23:11:35,521 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 618 628) the Hoare annotation is: true [2023-11-06 23:11:35,522 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 735 741) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:11:35,523 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 632 654) the Hoare annotation is: true [2023-11-06 23:11:35,523 INFO L895 garLoopResultBuilder]: At program point L936(line 936) the Hoare annotation is: false [2023-11-06 23:11:35,529 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:11:35,529 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:11:35,529 INFO L899 garLoopResultBuilder]: For program point L668(lines 667 714) no Hoare annotation was computed. [2023-11-06 23:11:35,529 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 710) no Hoare annotation was computed. [2023-11-06 23:11:35,530 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:11:35,530 INFO L902 garLoopResultBuilder]: At program point L718(lines 657 722) the Hoare annotation is: true [2023-11-06 23:11:35,530 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 610 616) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| 1)) [2023-11-06 23:11:35,530 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 683) no Hoare annotation was computed. [2023-11-06 23:11:35,530 INFO L899 garLoopResultBuilder]: For program point L677-1(lines 677 683) no Hoare annotation was computed. [2023-11-06 23:11:35,530 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:11:35,531 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 673) no Hoare annotation was computed. [2023-11-06 23:11:35,531 INFO L895 garLoopResultBuilder]: At program point L715(lines 666 716) the Hoare annotation is: false [2023-11-06 23:11:35,531 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:11:35,531 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 742 748) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:11:35,531 INFO L899 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2023-11-06 23:11:35,531 INFO L899 garLoopResultBuilder]: For program point L934-1(lines 934 940) no Hoare annotation was computed. [2023-11-06 23:11:35,532 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 709) no Hoare annotation was computed. [2023-11-06 23:11:35,532 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 420 427) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| 1)) [2023-11-06 23:11:35,532 INFO L895 garLoopResultBuilder]: At program point L703-2(lines 697 710) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:11:35,532 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 930 944) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:11:35,533 INFO L899 garLoopResultBuilder]: For program point L687(lines 687 693) no Hoare annotation was computed. [2023-11-06 23:11:35,533 INFO L899 garLoopResultBuilder]: For program point L687-1(lines 687 693) no Hoare annotation was computed. [2023-11-06 23:11:35,533 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 749 757) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0)) [2023-11-06 23:11:35,533 INFO L895 garLoopResultBuilder]: At program point L712(lines 667 714) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:11:35,534 INFO L895 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:11:35,534 INFO L899 garLoopResultBuilder]: For program point L642(lines 642 649) no Hoare annotation was computed. [2023-11-06 23:11:35,535 INFO L899 garLoopResultBuilder]: For program point L482-1(lines 478 489) no Hoare annotation was computed. [2023-11-06 23:11:35,536 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 478 489) no Hoare annotation was computed. [2023-11-06 23:11:35,536 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 478 489) the Hoare annotation is: true [2023-11-06 23:11:35,539 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 23:11:35,541 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:11:35,578 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:11:35 BoogieIcfgContainer [2023-11-06 23:11:35,578 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:11:35,579 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:11:35,579 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:11:35,579 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:11:35,580 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:11:33" (3/4) ... [2023-11-06 23:11:35,582 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:11:35,586 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 23:11:35,587 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:11:35,587 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:11:35,587 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:11:35,587 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:11:35,587 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 23:11:35,588 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:11:35,600 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 23:11:35,601 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:11:35,601 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:11:35,602 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:11:35,602 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:11:35,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) [2023-11-06 23:11:35,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) [2023-11-06 23:11:35,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) [2023-11-06 23:11:35,642 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,644 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 23:11:35,646 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:11:35,646 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 23:11:35,647 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,647 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,648 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,707 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) [2023-11-06 23:11:35,707 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) [2023-11-06 23:11:35,707 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) [2023-11-06 23:11:35,708 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,710 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 23:11:35,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:11:35,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) [2023-11-06 23:11:35,711 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,712 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:11:35,753 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:11:35,753 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:11:35,753 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:11:35,754 INFO L158 Benchmark]: Toolchain (without parser) took 4138.50ms. Allocated memory is still 167.8MB. Free memory was 125.0MB in the beginning and 86.1MB in the end (delta: 38.9MB). Peak memory consumption was 40.6MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,756 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 113.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:11:35,756 INFO L158 Benchmark]: CACSL2BoogieTranslator took 603.70ms. Allocated memory is still 167.8MB. Free memory was 124.7MB in the beginning and 105.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,757 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.15ms. Allocated memory is still 167.8MB. Free memory was 105.8MB in the beginning and 103.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,757 INFO L158 Benchmark]: Boogie Preprocessor took 63.66ms. Allocated memory is still 167.8MB. Free memory was 103.5MB in the beginning and 102.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,758 INFO L158 Benchmark]: RCFGBuilder took 715.67ms. Allocated memory is still 167.8MB. Free memory was 102.0MB in the beginning and 137.4MB in the end (delta: -35.4MB). Peak memory consumption was 17.9MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,758 INFO L158 Benchmark]: TraceAbstraction took 2491.15ms. Allocated memory is still 167.8MB. Free memory was 137.2MB in the beginning and 93.5MB in the end (delta: 43.7MB). Peak memory consumption was 45.8MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,759 INFO L158 Benchmark]: Witness Printer took 174.99ms. Allocated memory is still 167.8MB. Free memory was 93.5MB in the beginning and 86.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 23:11:35,766 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 113.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 603.70ms. Allocated memory is still 167.8MB. Free memory was 124.7MB in the beginning and 105.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.15ms. Allocated memory is still 167.8MB. Free memory was 105.8MB in the beginning and 103.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 63.66ms. Allocated memory is still 167.8MB. Free memory was 103.5MB in the beginning and 102.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 715.67ms. Allocated memory is still 167.8MB. Free memory was 102.0MB in the beginning and 137.4MB in the end (delta: -35.4MB). Peak memory consumption was 17.9MB. Max. memory is 16.1GB. * TraceAbstraction took 2491.15ms. Allocated memory is still 167.8MB. Free memory was 137.2MB in the beginning and 93.5MB in the end (delta: 43.7MB). Peak memory consumption was 45.8MB. Max. memory is 16.1GB. * Witness Printer took 174.99ms. Allocated memory is still 167.8MB. Free memory was 93.5MB in the beginning and 86.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [415] - GenericResultAtLocation [Line: 457]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [457] - GenericResultAtLocation [Line: 552]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [552] - GenericResultAtLocation [Line: 655]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [655] - GenericResultAtLocation [Line: 723]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [723] - GenericResultAtLocation [Line: 758]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [758] - GenericResultAtLocation [Line: 945]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [945] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 950]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 82 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.4s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 270 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 266 mSDsluCounter, 775 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 448 mSDsCounter, 30 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 90 IncrementalHoareTripleChecker+Invalid, 120 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 30 mSolverCounterUnsat, 327 mSDtfsCounter, 90 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 29 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=156occurred in iteration=3, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 4 MinimizatonAttempts, 6 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 216 PreInvPairs, 255 NumberOfFragments, 186 HoareAnnotationTreeSize, 216 FomulaSimplifications, 42 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 37 FomulaSimplificationsInter, 590 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 116 NumberOfCodeBlocks, 116 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 112 ConstructedInterpolants, 0 QuantifiedInterpolants, 219 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 610]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (tmp == 1)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 749]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\result == 0))) - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 796]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 618]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2023-11-06 23:11:35,805 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3ac9adcc-2ecc-488d-b520-382e627ee367/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE