./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash daf06f15c6a50440fa28ebda61a14a306dbf33e7f2231abb8ab4ae318f81a0b9 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:56:21,140 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:56:21,312 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:56:21,323 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:56:21,327 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:56:21,370 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:56:21,372 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:56:21,373 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:56:21,374 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:56:21,380 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:56:21,381 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:56:21,382 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:56:21,382 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:56:21,385 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:56:21,385 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:56:21,386 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:56:21,386 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:56:21,387 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:56:21,387 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:56:21,388 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:56:21,388 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:56:21,389 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:56:21,389 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:56:21,390 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:56:21,390 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:56:21,391 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:56:21,392 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:56:21,393 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:56:21,393 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:56:21,394 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:56:21,395 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:56:21,396 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:56:21,396 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:56:21,396 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:56:21,396 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:56:21,397 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:56:21,397 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:56:21,397 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:56:21,398 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:56:21,398 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> daf06f15c6a50440fa28ebda61a14a306dbf33e7f2231abb8ab4ae318f81a0b9 [2023-11-06 22:56:21,759 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:56:21,789 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:56:21,791 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:56:21,793 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:56:21,793 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:56:21,794 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c [2023-11-06 22:56:25,187 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:56:25,485 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:56:25,486 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c [2023-11-06 22:56:25,504 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/data/8f4772e52/2b239d3f9358463eb1445a38d46d75e9/FLAGf17252c92 [2023-11-06 22:56:25,522 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/data/8f4772e52/2b239d3f9358463eb1445a38d46d75e9 [2023-11-06 22:56:25,526 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:56:25,528 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:56:25,530 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:56:25,530 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:56:25,542 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:56:25,542 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:56:25" (1/1) ... [2023-11-06 22:56:25,543 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18e62e69 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:25, skipping insertion in model container [2023-11-06 22:56:25,544 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:56:25" (1/1) ... [2023-11-06 22:56:25,608 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:56:25,946 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c[5064,5077] [2023-11-06 22:56:26,035 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:56:26,049 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:56:26,061 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-06 22:56:26,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [237] [2023-11-06 22:56:26,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [305] [2023-11-06 22:56:26,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [314] [2023-11-06 22:56:26,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [680] [2023-11-06 22:56:26,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [718] [2023-11-06 22:56:26,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [814] [2023-11-06 22:56:26,066 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [841] [2023-11-06 22:56:26,084 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/sv-benchmarks/c/product-lines/minepump_spec4_product21.cil.c[5064,5077] [2023-11-06 22:56:26,138 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:56:26,163 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:56:26,164 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26 WrapperNode [2023-11-06 22:56:26,164 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:56:26,166 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:56:26,166 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:56:26,166 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:56:26,176 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,194 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,235 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 190 [2023-11-06 22:56:26,236 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:56:26,237 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:56:26,237 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:56:26,237 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:56:26,249 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,249 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,253 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,253 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,261 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,267 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,270 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,272 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,275 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:56:26,276 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:56:26,276 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:56:26,277 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:56:26,278 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (1/1) ... [2023-11-06 22:56:26,286 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:56:26,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:56:26,319 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:56:26,339 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:56:26,377 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:56:26,378 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:56:26,378 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:56:26,378 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:56:26,381 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:56:26,382 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:56:26,382 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:56:26,382 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:56:26,383 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:56:26,383 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:56:26,383 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:56:26,383 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:56:26,383 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:56:26,384 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:56:26,384 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:56:26,384 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:56:26,385 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:56:26,385 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:56:26,501 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:56:26,504 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:56:26,824 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:56:26,834 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:56:26,834 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:56:26,838 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:56:26 BoogieIcfgContainer [2023-11-06 22:56:26,838 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:56:26,842 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:56:26,846 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:56:26,850 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:56:26,851 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:56:25" (1/3) ... [2023-11-06 22:56:26,852 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44ce9f80 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:56:26, skipping insertion in model container [2023-11-06 22:56:26,853 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:56:26" (2/3) ... [2023-11-06 22:56:26,853 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44ce9f80 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:56:26, skipping insertion in model container [2023-11-06 22:56:26,854 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:56:26" (3/3) ... [2023-11-06 22:56:26,856 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product21.cil.c [2023-11-06 22:56:26,882 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:56:26,883 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:56:26,972 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:56:26,986 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1f3b374d, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:56:26,987 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:56:26,994 INFO L276 IsEmpty]: Start isEmpty. Operand has 82 states, 61 states have (on average 1.3934426229508197) internal successors, (85), 69 states have internal predecessors, (85), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:56:27,008 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:56:27,008 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:27,009 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:27,010 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:27,016 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:27,017 INFO L85 PathProgramCache]: Analyzing trace with hash -558003498, now seen corresponding path program 1 times [2023-11-06 22:56:27,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:27,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101887074] [2023-11-06 22:56:27,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:27,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:27,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:27,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:27,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:27,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101887074] [2023-11-06 22:56:27,268 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101887074] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:27,268 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:27,268 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:56:27,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255319430] [2023-11-06 22:56:27,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:27,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:56:27,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:27,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:56:27,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:56:27,324 INFO L87 Difference]: Start difference. First operand has 82 states, 61 states have (on average 1.3934426229508197) internal successors, (85), 69 states have internal predecessors, (85), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:27,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:27,388 INFO L93 Difference]: Finished difference Result 156 states and 213 transitions. [2023-11-06 22:56:27,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:56:27,391 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:56:27,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:27,412 INFO L225 Difference]: With dead ends: 156 [2023-11-06 22:56:27,412 INFO L226 Difference]: Without dead ends: 73 [2023-11-06 22:56:27,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:56:27,427 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:27,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:56:27,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2023-11-06 22:56:27,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2023-11-06 22:56:27,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 61 states have internal predecessors, (71), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 7 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:56:27,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 94 transitions. [2023-11-06 22:56:27,528 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 94 transitions. Word has length 19 [2023-11-06 22:56:27,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:27,530 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 94 transitions. [2023-11-06 22:56:27,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:27,531 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 94 transitions. [2023-11-06 22:56:27,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:56:27,538 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:27,539 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:27,540 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:56:27,541 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:27,542 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:27,542 INFO L85 PathProgramCache]: Analyzing trace with hash 349467644, now seen corresponding path program 1 times [2023-11-06 22:56:27,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:27,543 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [881582129] [2023-11-06 22:56:27,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:27,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:27,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:27,816 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:27,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:27,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [881582129] [2023-11-06 22:56:27,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [881582129] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:27,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:27,818 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:56:27,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006942208] [2023-11-06 22:56:27,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:27,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:56:27,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:27,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:56:27,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:56:27,822 INFO L87 Difference]: Start difference. First operand 73 states and 94 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:27,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:27,847 INFO L93 Difference]: Finished difference Result 112 states and 144 transitions. [2023-11-06 22:56:27,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:56:27,848 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:56:27,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:27,850 INFO L225 Difference]: With dead ends: 112 [2023-11-06 22:56:27,850 INFO L226 Difference]: Without dead ends: 64 [2023-11-06 22:56:27,852 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:56:27,854 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 12 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:27,855 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 146 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:56:27,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-06 22:56:27,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-06 22:56:27,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 48 states have (on average 1.3333333333333333) internal successors, (64), 55 states have internal predecessors, (64), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 5 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:56:27,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 82 transitions. [2023-11-06 22:56:27,870 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 82 transitions. Word has length 20 [2023-11-06 22:56:27,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:27,870 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 82 transitions. [2023-11-06 22:56:27,871 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:27,871 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 82 transitions. [2023-11-06 22:56:27,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:56:27,873 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:27,873 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:27,873 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:56:27,874 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:27,874 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:27,874 INFO L85 PathProgramCache]: Analyzing trace with hash 1950570308, now seen corresponding path program 1 times [2023-11-06 22:56:27,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:27,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [663658254] [2023-11-06 22:56:27,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:27,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:27,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:28,143 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:28,144 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:28,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [663658254] [2023-11-06 22:56:28,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [663658254] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:28,146 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:28,149 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:56:28,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [290864197] [2023-11-06 22:56:28,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:28,159 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:56:28,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:28,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:56:28,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:56:28,161 INFO L87 Difference]: Start difference. First operand 64 states and 82 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:28,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:28,385 INFO L93 Difference]: Finished difference Result 121 states and 158 transitions. [2023-11-06 22:56:28,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:56:28,386 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-06 22:56:28,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:28,388 INFO L225 Difference]: With dead ends: 121 [2023-11-06 22:56:28,390 INFO L226 Difference]: Without dead ends: 64 [2023-11-06 22:56:28,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:56:28,395 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 106 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:28,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 163 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:56:28,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-06 22:56:28,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2023-11-06 22:56:28,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 48 states have (on average 1.3125) internal successors, (63), 55 states have internal predecessors, (63), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 5 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:56:28,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 81 transitions. [2023-11-06 22:56:28,431 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 81 transitions. Word has length 24 [2023-11-06 22:56:28,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:28,432 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 81 transitions. [2023-11-06 22:56:28,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:28,433 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 81 transitions. [2023-11-06 22:56:28,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:56:28,438 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:28,439 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:28,440 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:56:28,440 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:28,441 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:28,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1483904855, now seen corresponding path program 1 times [2023-11-06 22:56:28,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:28,443 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [515983457] [2023-11-06 22:56:28,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:28,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:28,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:28,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:56:28,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:28,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:56:28,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:28,671 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:28,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:28,672 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [515983457] [2023-11-06 22:56:28,672 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [515983457] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:28,672 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:28,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:56:28,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677503878] [2023-11-06 22:56:28,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:28,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:56:28,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:28,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:56:28,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:56:28,676 INFO L87 Difference]: Start difference. First operand 64 states and 81 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:56:28,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:28,996 INFO L93 Difference]: Finished difference Result 193 states and 253 transitions. [2023-11-06 22:56:28,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:56:28,997 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 34 [2023-11-06 22:56:28,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:29,006 INFO L225 Difference]: With dead ends: 193 [2023-11-06 22:56:29,007 INFO L226 Difference]: Without dead ends: 136 [2023-11-06 22:56:29,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:56:29,018 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 117 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:29,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 284 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:56:29,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2023-11-06 22:56:29,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 114. [2023-11-06 22:56:29,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 84 states have (on average 1.3095238095238095) internal successors, (110), 96 states have internal predecessors, (110), 18 states have call successors, (18), 12 states have call predecessors, (18), 11 states have return successors, (19), 9 states have call predecessors, (19), 18 states have call successors, (19) [2023-11-06 22:56:29,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 147 transitions. [2023-11-06 22:56:29,084 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 147 transitions. Word has length 34 [2023-11-06 22:56:29,084 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:29,084 INFO L495 AbstractCegarLoop]: Abstraction has 114 states and 147 transitions. [2023-11-06 22:56:29,085 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:56:29,087 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 147 transitions. [2023-11-06 22:56:29,096 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-11-06 22:56:29,096 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:29,096 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:29,096 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:56:29,097 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:29,097 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:29,098 INFO L85 PathProgramCache]: Analyzing trace with hash -404254290, now seen corresponding path program 1 times [2023-11-06 22:56:29,098 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:29,098 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494099570] [2023-11-06 22:56:29,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:29,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:29,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:56:29,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:56:29,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:29,257 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:29,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494099570] [2023-11-06 22:56:29,258 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494099570] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:29,258 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:29,259 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:56:29,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625634655] [2023-11-06 22:56:29,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:29,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:56:29,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:29,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:56:29,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:56:29,264 INFO L87 Difference]: Start difference. First operand 114 states and 147 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:56:29,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:29,412 INFO L93 Difference]: Finished difference Result 188 states and 245 transitions. [2023-11-06 22:56:29,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 22:56:29,413 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 36 [2023-11-06 22:56:29,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:29,415 INFO L225 Difference]: With dead ends: 188 [2023-11-06 22:56:29,416 INFO L226 Difference]: Without dead ends: 81 [2023-11-06 22:56:29,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:56:29,422 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 55 mSDsluCounter, 19 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:29,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 57 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:56:29,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2023-11-06 22:56:29,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2023-11-06 22:56:29,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 61 states have (on average 1.2131147540983607) internal successors, (74), 65 states have internal predecessors, (74), 10 states have call successors, (10), 10 states have call predecessors, (10), 9 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:56:29,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 94 transitions. [2023-11-06 22:56:29,462 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 94 transitions. Word has length 36 [2023-11-06 22:56:29,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:29,462 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 94 transitions. [2023-11-06 22:56:29,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:56:29,463 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 94 transitions. [2023-11-06 22:56:29,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 22:56:29,466 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:56:29,466 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:56:29,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:56:29,467 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:56:29,468 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:56:29,471 INFO L85 PathProgramCache]: Analyzing trace with hash 1136708431, now seen corresponding path program 1 times [2023-11-06 22:56:29,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:56:29,473 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906363430] [2023-11-06 22:56:29,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:56:29,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:56:29,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:56:29,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:56:29,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:56:29,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:56:29,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:56:29,653 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:56:29,653 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906363430] [2023-11-06 22:56:29,653 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906363430] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:56:29,654 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:56:29,654 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:56:29,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687069481] [2023-11-06 22:56:29,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:56:29,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:56:29,655 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:56:29,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:56:29,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:56:29,656 INFO L87 Difference]: Start difference. First operand 81 states and 94 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:56:29,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:56:29,815 INFO L93 Difference]: Finished difference Result 86 states and 99 transitions. [2023-11-06 22:56:29,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:56:29,816 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2023-11-06 22:56:29,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:56:29,816 INFO L225 Difference]: With dead ends: 86 [2023-11-06 22:56:29,817 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:56:29,817 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:56:29,818 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 69 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:56:29,825 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 130 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:56:29,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:56:29,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:56:29,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:56:29,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:56:29,827 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 38 [2023-11-06 22:56:29,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:56:29,829 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:56:29,829 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:56:29,829 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:56:29,829 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:56:29,832 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:56:29,833 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:56:29,835 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:56:30,616 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 154 161) no Hoare annotation was computed. [2023-11-06 22:56:30,617 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 154 161) the Hoare annotation is: true [2023-11-06 22:56:30,617 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 154 161) no Hoare annotation was computed. [2023-11-06 22:56:30,617 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 87 93) no Hoare annotation was computed. [2023-11-06 22:56:30,617 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 87 93) the Hoare annotation is: true [2023-11-06 22:56:30,617 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 868 879) the Hoare annotation is: true [2023-11-06 22:56:30,618 INFO L899 garLoopResultBuilder]: For program point L872-1(lines 868 879) no Hoare annotation was computed. [2023-11-06 22:56:30,618 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 868 879) no Hoare annotation was computed. [2023-11-06 22:56:30,618 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 720 749) no Hoare annotation was computed. [2023-11-06 22:56:30,618 INFO L899 garLoopResultBuilder]: For program point L734(lines 734 738) no Hoare annotation was computed. [2023-11-06 22:56:30,618 INFO L902 garLoopResultBuilder]: At program point L734-1(lines 734 738) the Hoare annotation is: true [2023-11-06 22:56:30,618 INFO L899 garLoopResultBuilder]: For program point L731(line 731) no Hoare annotation was computed. [2023-11-06 22:56:30,619 INFO L902 garLoopResultBuilder]: At program point L730-2(lines 730 744) the Hoare annotation is: true [2023-11-06 22:56:30,619 INFO L902 garLoopResultBuilder]: At program point L726(line 726) the Hoare annotation is: true [2023-11-06 22:56:30,619 INFO L899 garLoopResultBuilder]: For program point L726-1(line 726) no Hoare annotation was computed. [2023-11-06 22:56:30,619 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 720 749) the Hoare annotation is: true [2023-11-06 22:56:30,619 INFO L902 garLoopResultBuilder]: At program point L745(lines 720 749) the Hoare annotation is: true [2023-11-06 22:56:30,620 INFO L899 garLoopResultBuilder]: For program point L741(line 741) no Hoare annotation was computed. [2023-11-06 22:56:30,620 INFO L899 garLoopResultBuilder]: For program point L828(lines 828 834) no Hoare annotation was computed. [2023-11-06 22:56:30,620 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 837) no Hoare annotation was computed. [2023-11-06 22:56:30,620 INFO L895 garLoopResultBuilder]: At program point L824-1(lines 816 840) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~8#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2023-11-06 22:56:30,621 INFO L895 garLoopResultBuilder]: At program point L135(line 135) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,621 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 63 86) no Hoare annotation was computed. [2023-11-06 22:56:30,621 INFO L895 garLoopResultBuilder]: At program point L131(line 131) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,622 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 912 920) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2023-11-06 22:56:30,622 INFO L895 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,622 INFO L895 garLoopResultBuilder]: At program point L140-1(lines 121 145) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,622 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2023-11-06 22:56:30,622 INFO L899 garLoopResultBuilder]: For program point L310(line 310) no Hoare annotation was computed. [2023-11-06 22:56:30,623 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 306 313) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,623 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 63 86) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,623 INFO L899 garLoopResultBuilder]: For program point L67-1(lines 66 85) no Hoare annotation was computed. [2023-11-06 22:56:30,623 INFO L899 garLoopResultBuilder]: For program point L129(lines 129 137) no Hoare annotation was computed. [2023-11-06 22:56:30,623 INFO L899 garLoopResultBuilder]: For program point L125(lines 125 142) no Hoare annotation was computed. [2023-11-06 22:56:30,624 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 852) no Hoare annotation was computed. [2023-11-06 22:56:30,624 INFO L895 garLoopResultBuilder]: At program point L848-2(lines 844 855) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,624 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 880 888) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,624 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 63 86) no Hoare annotation was computed. [2023-11-06 22:56:30,624 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 162 172) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,625 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 173 181) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 22:56:30,625 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 310) no Hoare annotation was computed. [2023-11-06 22:56:30,625 INFO L899 garLoopResultBuilder]: For program point L287(lines 287 291) no Hoare annotation was computed. [2023-11-06 22:56:30,626 INFO L895 garLoopResultBuilder]: At program point L287-2(lines 281 292) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:56:30,626 INFO L899 garLoopResultBuilder]: For program point L271(lines 271 277) no Hoare annotation was computed. [2023-11-06 22:56:30,626 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 781 790) the Hoare annotation is: true [2023-11-06 22:56:30,626 INFO L899 garLoopResultBuilder]: For program point L271-1(lines 271 277) no Hoare annotation was computed. [2023-11-06 22:56:30,626 INFO L902 garLoopResultBuilder]: At program point L300(lines 241 304) the Hoare annotation is: true [2023-11-06 22:56:30,627 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 695 701) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:56:30,627 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 791 813) the Hoare annotation is: true [2023-11-06 22:56:30,627 INFO L895 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:56:30,627 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:56:30,627 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:56:30,628 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 774 780) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:56:30,628 INFO L895 garLoopResultBuilder]: At program point L297(lines 250 298) the Hoare annotation is: false [2023-11-06 22:56:30,632 INFO L899 garLoopResultBuilder]: For program point L801(lines 801 808) no Hoare annotation was computed. [2023-11-06 22:56:30,632 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:56:30,632 INFO L899 garLoopResultBuilder]: For program point L801-2(lines 801 808) no Hoare annotation was computed. [2023-11-06 22:56:30,632 INFO L899 garLoopResultBuilder]: For program point L252(lines 251 296) no Hoare annotation was computed. [2023-11-06 22:56:30,633 INFO L899 garLoopResultBuilder]: For program point L281(lines 281 292) no Hoare annotation was computed. [2023-11-06 22:56:30,633 INFO L895 garLoopResultBuilder]: At program point L273(line 273) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:56:30,633 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:56:30,633 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 702 708) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:56:30,634 INFO L895 garLoopResultBuilder]: At program point L294(lines 251 296) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~7#1| 1) (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 22:56:30,634 INFO L899 garLoopResultBuilder]: For program point L261(lines 261 267) no Hoare annotation was computed. [2023-11-06 22:56:30,634 INFO L899 garLoopResultBuilder]: For program point L261-1(lines 261 267) no Hoare annotation was computed. [2023-11-06 22:56:30,634 INFO L899 garLoopResultBuilder]: For program point L253(lines 253 257) no Hoare annotation was computed. [2023-11-06 22:56:30,634 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 709 717) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:56:30,635 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 856 867) no Hoare annotation was computed. [2023-11-06 22:56:30,635 INFO L899 garLoopResultBuilder]: For program point L860-1(lines 856 867) no Hoare annotation was computed. [2023-11-06 22:56:30,635 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 856 867) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (not (= 1 ~systemActive~0)) (= |old(~waterLevel~0)| ~waterLevel~0)) [2023-11-06 22:56:30,636 INFO L899 garLoopResultBuilder]: For program point L227-2(lines 227 231) no Hoare annotation was computed. [2023-11-06 22:56:30,636 INFO L895 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,636 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 95 119) no Hoare annotation was computed. [2023-11-06 22:56:30,637 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 921 929) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,637 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 95 119) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,637 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 218 236) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,637 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 95 119) no Hoare annotation was computed. [2023-11-06 22:56:30,637 INFO L895 garLoopResultBuilder]: At program point L109(line 109) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,638 INFO L895 garLoopResultBuilder]: At program point L105(line 105) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2023-11-06 22:56:30,644 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 111) no Hoare annotation was computed. [2023-11-06 22:56:30,644 INFO L899 garLoopResultBuilder]: For program point L99(lines 99 116) no Hoare annotation was computed. [2023-11-06 22:56:30,644 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 231) no Hoare annotation was computed. [2023-11-06 22:56:30,647 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2023-11-06 22:56:30,650 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:56:30,674 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:56:30 BoogieIcfgContainer [2023-11-06 22:56:30,674 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:56:30,675 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:56:30,675 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:56:30,675 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:56:30,676 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:56:26" (3/4) ... [2023-11-06 22:56:30,679 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:56:30,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:56:30,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:56:30,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:56:30,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:56:30,684 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:56:30,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:56:30,685 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:56:30,695 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:56:30,696 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:56:30,697 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:56:30,698 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:56:30,699 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:56:30,735 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:56:30,735 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:56:30,736 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) [2023-11-06 22:56:30,737 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,738 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) [2023-11-06 22:56:30,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) [2023-11-06 22:56:30,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,739 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((tmp == 1) && (\result == 1)))) [2023-11-06 22:56:30,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:56:30,741 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,741 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,778 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:56:30,779 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 22:56:30,779 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) [2023-11-06 22:56:30,779 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,780 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) [2023-11-06 22:56:30,780 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) [2023-11-06 22:56:30,780 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,781 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((tmp == 1) && (\result == 1)))) [2023-11-06 22:56:30,781 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,781 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,781 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) [2023-11-06 22:56:30,782 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,782 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) [2023-11-06 22:56:30,797 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:56:30,798 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:56:30,798 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:56:30,799 INFO L158 Benchmark]: Toolchain (without parser) took 5271.13ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 117.7MB in the beginning and 64.7MB in the end (delta: 53.0MB). Peak memory consumption was 80.6MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,799 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 117.4MB. Free memory is still 87.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:56:30,799 INFO L158 Benchmark]: CACSL2BoogieTranslator took 635.18ms. Allocated memory is still 155.2MB. Free memory was 117.7MB in the beginning and 116.2MB in the end (delta: 1.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,800 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.48ms. Allocated memory is still 155.2MB. Free memory was 116.2MB in the beginning and 114.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,800 INFO L158 Benchmark]: Boogie Preprocessor took 38.59ms. Allocated memory is still 155.2MB. Free memory was 114.1MB in the beginning and 112.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,800 INFO L158 Benchmark]: RCFGBuilder took 561.97ms. Allocated memory is still 155.2MB. Free memory was 112.4MB in the beginning and 96.0MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,801 INFO L158 Benchmark]: TraceAbstraction took 3832.55ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 95.6MB in the beginning and 72.0MB in the end (delta: 23.6MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,801 INFO L158 Benchmark]: Witness Printer took 122.92ms. Allocated memory is still 186.6MB. Free memory was 72.0MB in the beginning and 64.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:56:30,803 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 117.4MB. Free memory is still 87.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 635.18ms. Allocated memory is still 155.2MB. Free memory was 117.7MB in the beginning and 116.2MB in the end (delta: 1.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.48ms. Allocated memory is still 155.2MB. Free memory was 116.2MB in the beginning and 114.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.59ms. Allocated memory is still 155.2MB. Free memory was 114.1MB in the beginning and 112.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 561.97ms. Allocated memory is still 155.2MB. Free memory was 112.4MB in the beginning and 96.0MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 3832.55ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 95.6MB in the beginning and 72.0MB in the end (delta: 23.6MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. * Witness Printer took 122.92ms. Allocated memory is still 186.6MB. Free memory was 72.0MB in the beginning and 64.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 237]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [237] - GenericResultAtLocation [Line: 305]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [305] - GenericResultAtLocation [Line: 314]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [314] - GenericResultAtLocation [Line: 680]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [680] - GenericResultAtLocation [Line: 718]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [718] - GenericResultAtLocation [Line: 814]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [814] - GenericResultAtLocation [Line: 841]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [841] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 310]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 82 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.7s, OverallIterations: 6, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 368 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 359 mSDsluCounter, 883 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 488 mSDsCounter, 73 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 271 IncrementalHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 73 mSolverCounterUnsat, 395 mSDtfsCounter, 271 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 54 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=114occurred in iteration=4, InterpolantAutomatonStates: 30, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 6 MinimizatonAttempts, 22 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 278 PreInvPairs, 300 NumberOfFragments, 402 HoareAnnotationTreeSize, 278 FomulaSimplifications, 127 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 39 FomulaSimplificationsInter, 576 FormulaSimplificationTreeSizeReductionInter, 0.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 171 NumberOfCodeBlocks, 171 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 165 ConstructedInterpolants, 0 QuantifiedInterpolants, 359 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || !((1 == systemActive))) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) - InvariantResult [Line: 791]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive)))) - InvariantResult [Line: 251]: Loop Invariant Derived loop invariant: (((((tmp == 1) && (pumpRunning == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) - InvariantResult [Line: 730]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || ((tmp == 1) && (\result == 1)))) - InvariantResult [Line: 250]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:56:30,833 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c1b004ce-eb5b-4aee-a25d-1ecb7aad6f51/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE