./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7491e9e7e66695ce6d97d4c4c38cf37fc3e1ef2df09eb8fb958f4ec180b71f50 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:51:05,957 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:51:06,048 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:51:06,053 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:51:06,054 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:51:06,092 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:51:06,103 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:51:06,104 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:51:06,105 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:51:06,111 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:51:06,112 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:51:06,113 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:51:06,114 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:51:06,115 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:51:06,116 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:51:06,117 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:51:06,117 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:51:06,118 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:51:06,118 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:51:06,119 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:51:06,119 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:51:06,120 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:51:06,120 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:51:06,121 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:51:06,121 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:51:06,122 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:51:06,122 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:51:06,122 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:51:06,123 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:51:06,123 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:51:06,124 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:51:06,124 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:51:06,125 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:51:06,125 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:51:06,125 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:51:06,125 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:51:06,126 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:51:06,126 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:51:06,126 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:51:06,126 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7491e9e7e66695ce6d97d4c4c38cf37fc3e1ef2df09eb8fb958f4ec180b71f50 [2023-11-06 22:51:06,430 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:51:06,468 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:51:06,472 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:51:06,474 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:51:06,476 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:51:06,478 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c [2023-11-06 22:51:09,930 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:51:10,228 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:51:10,228 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c [2023-11-06 22:51:10,250 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/data/daf9d7d58/88b9c9e7fbfe44878d4e9ad17fcd46f9/FLAGc28d585b7 [2023-11-06 22:51:10,265 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/data/daf9d7d58/88b9c9e7fbfe44878d4e9ad17fcd46f9 [2023-11-06 22:51:10,268 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:51:10,271 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:51:10,272 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:10,273 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:51:10,281 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:51:10,281 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,283 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@122d73eb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10, skipping insertion in model container [2023-11-06 22:51:10,283 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,343 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:51:10,566 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c[2567,2580] [2023-11-06 22:51:10,694 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:10,710 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:51:10,723 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [49] [2023-11-06 22:51:10,726 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [78] [2023-11-06 22:51:10,726 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [116] [2023-11-06 22:51:10,726 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [125] [2023-11-06 22:51:10,727 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [226] [2023-11-06 22:51:10,727 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [319] [2023-11-06 22:51:10,727 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [685] [2023-11-06 22:51:10,728 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [907] [2023-11-06 22:51:10,737 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c[2567,2580] [2023-11-06 22:51:10,801 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:10,828 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:51:10,829 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10 WrapperNode [2023-11-06 22:51:10,829 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:10,830 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:10,831 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:51:10,831 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:51:10,841 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,859 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,895 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 23, calls inlined = 19, statements flattened = 198 [2023-11-06 22:51:10,896 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:10,897 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:51:10,897 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:51:10,897 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:51:10,910 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,910 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,913 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,913 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,921 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,928 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,930 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,932 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,936 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:51:10,938 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:51:10,938 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:51:10,938 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:51:10,940 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:51:10,963 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:10,980 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:11,062 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:51:11,089 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:51:11,089 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:51:11,090 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:51:11,090 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:51:11,092 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:51:11,093 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:51:11,094 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:51:11,094 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:51:11,094 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:51:11,094 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:51:11,095 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:51:11,095 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:51:11,095 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:51:11,096 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:51:11,096 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:51:11,097 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:51:11,097 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:51:11,098 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:51:11,098 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:51:11,098 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:51:11,269 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:51:11,272 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:51:11,769 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:51:11,778 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:51:11,779 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:51:11,782 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:11 BoogieIcfgContainer [2023-11-06 22:51:11,782 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:51:11,786 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:51:11,786 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:51:11,790 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:51:11,791 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:51:10" (1/3) ... [2023-11-06 22:51:11,792 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@10cbfdbf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:51:11, skipping insertion in model container [2023-11-06 22:51:11,792 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10" (2/3) ... [2023-11-06 22:51:11,792 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@10cbfdbf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:51:11, skipping insertion in model container [2023-11-06 22:51:11,793 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:11" (3/3) ... [2023-11-06 22:51:11,794 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product32.cil.c [2023-11-06 22:51:11,820 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:51:11,820 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:51:11,897 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:51:11,907 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5e921303, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:51:11,907 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:51:11,912 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 67 states have (on average 1.373134328358209) internal successors, (92), 76 states have internal predecessors, (92), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:51:11,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:51:11,923 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:11,924 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:11,924 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:11,931 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:11,932 INFO L85 PathProgramCache]: Analyzing trace with hash 2132141092, now seen corresponding path program 1 times [2023-11-06 22:51:11,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:11,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982794050] [2023-11-06 22:51:11,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:11,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:12,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:12,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:12,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982794050] [2023-11-06 22:51:12,153 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982794050] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:12,153 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:12,153 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:12,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311985562] [2023-11-06 22:51:12,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:12,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:51:12,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:12,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:51:12,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:51:12,212 INFO L87 Difference]: Start difference. First operand has 91 states, 67 states have (on average 1.373134328358209) internal successors, (92), 76 states have internal predecessors, (92), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:12,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:12,278 INFO L93 Difference]: Finished difference Result 174 states and 235 transitions. [2023-11-06 22:51:12,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:51:12,281 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:51:12,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:12,294 INFO L225 Difference]: With dead ends: 174 [2023-11-06 22:51:12,294 INFO L226 Difference]: Without dead ends: 82 [2023-11-06 22:51:12,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:51:12,309 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:12,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:12,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2023-11-06 22:51:12,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2023-11-06 22:51:12,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3) internal successors, (78), 68 states have internal predecessors, (78), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:51:12,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2023-11-06 22:51:12,382 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 19 [2023-11-06 22:51:12,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:12,383 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2023-11-06 22:51:12,384 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:12,384 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2023-11-06 22:51:12,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:51:12,386 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:12,387 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:12,387 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:51:12,387 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:12,388 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:12,389 INFO L85 PathProgramCache]: Analyzing trace with hash 430634852, now seen corresponding path program 1 times [2023-11-06 22:51:12,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:12,389 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900549117] [2023-11-06 22:51:12,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:12,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:12,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:12,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:12,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900549117] [2023-11-06 22:51:12,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1900549117] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:12,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:12,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:51:12,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379230963] [2023-11-06 22:51:12,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:12,545 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:51:12,545 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:12,546 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:12,546 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:12,547 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:12,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:12,572 INFO L93 Difference]: Finished difference Result 125 states and 159 transitions. [2023-11-06 22:51:12,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:12,573 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:51:12,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:12,575 INFO L225 Difference]: With dead ends: 125 [2023-11-06 22:51:12,576 INFO L226 Difference]: Without dead ends: 73 [2023-11-06 22:51:12,577 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:12,579 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 17 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:12,580 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 162 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:12,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2023-11-06 22:51:12,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2023-11-06 22:51:12,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 62 states have internal predecessors, (71), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 7 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:51:12,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2023-11-06 22:51:12,596 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 20 [2023-11-06 22:51:12,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:12,597 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2023-11-06 22:51:12,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:12,597 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2023-11-06 22:51:12,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:51:12,602 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:12,602 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:12,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:51:12,604 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:12,606 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:12,607 INFO L85 PathProgramCache]: Analyzing trace with hash -593314217, now seen corresponding path program 1 times [2023-11-06 22:51:12,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:12,609 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1311661591] [2023-11-06 22:51:12,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:12,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:12,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:12,910 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:12,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1311661591] [2023-11-06 22:51:12,912 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1311661591] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:12,914 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:12,914 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:12,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1327757526] [2023-11-06 22:51:12,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:12,917 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:12,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:12,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:12,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:12,921 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:13,147 INFO L93 Difference]: Finished difference Result 177 states and 230 transitions. [2023-11-06 22:51:13,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:51:13,148 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-06 22:51:13,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:13,151 INFO L225 Difference]: With dead ends: 177 [2023-11-06 22:51:13,151 INFO L226 Difference]: Without dead ends: 111 [2023-11-06 22:51:13,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:51:13,155 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 156 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:13,155 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 295 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:13,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2023-11-06 22:51:13,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 108. [2023-11-06 22:51:13,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 81 states have (on average 1.345679012345679) internal successors, (109), 92 states have internal predecessors, (109), 15 states have call successors, (15), 11 states have call predecessors, (15), 11 states have return successors, (16), 10 states have call predecessors, (16), 15 states have call successors, (16) [2023-11-06 22:51:13,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2023-11-06 22:51:13,183 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 25 [2023-11-06 22:51:13,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:13,183 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2023-11-06 22:51:13,184 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,184 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2023-11-06 22:51:13,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 22:51:13,186 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:13,186 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:13,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:51:13,187 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:13,187 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:13,188 INFO L85 PathProgramCache]: Analyzing trace with hash -1659032566, now seen corresponding path program 1 times [2023-11-06 22:51:13,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:13,188 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1275243967] [2023-11-06 22:51:13,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:13,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:13,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:13,347 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:13,347 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1275243967] [2023-11-06 22:51:13,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1275243967] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:13,348 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:13,348 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:13,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1098377719] [2023-11-06 22:51:13,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:13,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:13,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:13,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:13,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:13,351 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:13,492 INFO L93 Difference]: Finished difference Result 298 states and 403 transitions. [2023-11-06 22:51:13,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:13,493 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-11-06 22:51:13,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:13,497 INFO L225 Difference]: With dead ends: 298 [2023-11-06 22:51:13,497 INFO L226 Difference]: Without dead ends: 197 [2023-11-06 22:51:13,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:51:13,501 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 63 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 340 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:13,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 340 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:13,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2023-11-06 22:51:13,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 197. [2023-11-06 22:51:13,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 146 states have (on average 1.3287671232876712) internal successors, (194), 165 states have internal predecessors, (194), 30 states have call successors, (30), 22 states have call predecessors, (30), 20 states have return successors, (35), 18 states have call predecessors, (35), 30 states have call successors, (35) [2023-11-06 22:51:13,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 259 transitions. [2023-11-06 22:51:13,550 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 259 transitions. Word has length 28 [2023-11-06 22:51:13,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:13,550 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 259 transitions. [2023-11-06 22:51:13,551 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,551 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 259 transitions. [2023-11-06 22:51:13,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:51:13,554 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:13,555 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:13,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:51:13,555 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:13,556 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:13,556 INFO L85 PathProgramCache]: Analyzing trace with hash 371851791, now seen corresponding path program 1 times [2023-11-06 22:51:13,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:13,557 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1449725574] [2023-11-06 22:51:13,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:13,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:13,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:13,663 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:13,664 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1449725574] [2023-11-06 22:51:13,664 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1449725574] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:13,664 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:13,664 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:13,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282752818] [2023-11-06 22:51:13,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:13,666 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:51:13,666 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:13,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:13,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:13,669 INFO L87 Difference]: Start difference. First operand 197 states and 259 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:13,721 INFO L93 Difference]: Finished difference Result 333 states and 448 transitions. [2023-11-06 22:51:13,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:13,722 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-06 22:51:13,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:13,731 INFO L225 Difference]: With dead ends: 333 [2023-11-06 22:51:13,731 INFO L226 Difference]: Without dead ends: 143 [2023-11-06 22:51:13,734 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:13,742 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 39 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:13,748 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 54 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:13,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2023-11-06 22:51:13,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 141. [2023-11-06 22:51:13,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 110 states have (on average 1.2545454545454546) internal successors, (138), 117 states have internal predecessors, (138), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (18), 14 states have call predecessors, (18), 16 states have call successors, (18) [2023-11-06 22:51:13,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 172 transitions. [2023-11-06 22:51:13,796 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 172 transitions. Word has length 30 [2023-11-06 22:51:13,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:13,797 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 172 transitions. [2023-11-06 22:51:13,798 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:13,798 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 172 transitions. [2023-11-06 22:51:13,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:51:13,806 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:13,807 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:13,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:51:13,807 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:13,808 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:13,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1477156208, now seen corresponding path program 1 times [2023-11-06 22:51:13,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:13,809 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1039865017] [2023-11-06 22:51:13,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:13,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:13,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:51:13,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:13,934 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:13,935 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1039865017] [2023-11-06 22:51:13,935 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1039865017] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:13,935 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:13,935 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:51:13,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1286228408] [2023-11-06 22:51:13,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:13,936 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:51:13,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:13,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:51:13,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:51:13,939 INFO L87 Difference]: Start difference. First operand 141 states and 172 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:14,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:14,095 INFO L93 Difference]: Finished difference Result 151 states and 183 transitions. [2023-11-06 22:51:14,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:51:14,096 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 22:51:14,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:14,096 INFO L225 Difference]: With dead ends: 151 [2023-11-06 22:51:14,097 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:51:14,097 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:51:14,099 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 53 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:14,100 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 147 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:14,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:51:14,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:51:14,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:14,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:51:14,102 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 32 [2023-11-06 22:51:14,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:14,102 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:51:14,103 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:14,103 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:51:14,103 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:51:14,111 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:51:14,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:51:14,114 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:51:15,105 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 801 808) no Hoare annotation was computed. [2023-11-06 22:51:15,105 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 801 808) the Hoare annotation is: true [2023-11-06 22:51:15,105 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 801 808) no Hoare annotation was computed. [2023-11-06 22:51:15,106 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 717 723) no Hoare annotation was computed. [2023-11-06 22:51:15,106 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 717 723) the Hoare annotation is: true [2023-11-06 22:51:15,106 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 257 268) the Hoare annotation is: true [2023-11-06 22:51:15,106 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 257 268) no Hoare annotation was computed. [2023-11-06 22:51:15,107 INFO L899 garLoopResultBuilder]: For program point L261-1(lines 257 268) no Hoare annotation was computed. [2023-11-06 22:51:15,107 INFO L895 garLoopResultBuilder]: At program point L770-1(lines 751 775) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:51:15,107 INFO L899 garLoopResultBuilder]: For program point L704-1(lines 704 710) no Hoare annotation was computed. [2023-11-06 22:51:15,107 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 693 716) no Hoare annotation was computed. [2023-11-06 22:51:15,108 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2023-11-06 22:51:15,108 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2023-11-06 22:51:15,108 INFO L895 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))))) [2023-11-06 22:51:15,108 INFO L899 garLoopResultBuilder]: For program point L697-1(lines 696 715) no Hoare annotation was computed. [2023-11-06 22:51:15,109 INFO L899 garLoopResultBuilder]: For program point L759(lines 759 767) no Hoare annotation was computed. [2023-11-06 22:51:15,109 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 301 309) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1)))) [2023-11-06 22:51:15,109 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 772) no Hoare annotation was computed. [2023-11-06 22:51:15,109 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 117 124) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:51:15,109 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 693 716) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) [2023-11-06 22:51:15,110 INFO L895 garLoopResultBuilder]: At program point L765(line 765) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:51:15,110 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:51:15,110 INFO L899 garLoopResultBuilder]: For program point L121(line 121) no Hoare annotation was computed. [2023-11-06 22:51:15,110 INFO L895 garLoopResultBuilder]: At program point L757(line 757) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:51:15,111 INFO L899 garLoopResultBuilder]: For program point L757-1(line 757) no Hoare annotation was computed. [2023-11-06 22:51:15,111 INFO L899 garLoopResultBuilder]: For program point L237(lines 237 241) no Hoare annotation was computed. [2023-11-06 22:51:15,111 INFO L895 garLoopResultBuilder]: At program point L237-2(lines 233 244) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:51:15,111 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 693 716) no Hoare annotation was computed. [2023-11-06 22:51:15,111 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 820 828) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 22:51:15,112 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 121) no Hoare annotation was computed. [2023-11-06 22:51:15,112 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:51:15,112 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 128 157) no Hoare annotation was computed. [2023-11-06 22:51:15,112 INFO L902 garLoopResultBuilder]: At program point L153(lines 128 157) the Hoare annotation is: true [2023-11-06 22:51:15,112 INFO L899 garLoopResultBuilder]: For program point L149(line 149) no Hoare annotation was computed. [2023-11-06 22:51:15,113 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 146) no Hoare annotation was computed. [2023-11-06 22:51:15,113 INFO L902 garLoopResultBuilder]: At program point L142-1(lines 142 146) the Hoare annotation is: true [2023-11-06 22:51:15,113 INFO L899 garLoopResultBuilder]: For program point L139(line 139) no Hoare annotation was computed. [2023-11-06 22:51:15,113 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 128 157) the Hoare annotation is: true [2023-11-06 22:51:15,113 INFO L902 garLoopResultBuilder]: At program point L138-2(lines 138 152) the Hoare annotation is: true [2023-11-06 22:51:15,114 INFO L902 garLoopResultBuilder]: At program point L134(line 134) the Hoare annotation is: true [2023-11-06 22:51:15,114 INFO L899 garLoopResultBuilder]: For program point L134-1(line 134) no Hoare annotation was computed. [2023-11-06 22:51:15,114 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 899 906) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:51:15,114 INFO L899 garLoopResultBuilder]: For program point L956(lines 956 962) no Hoare annotation was computed. [2023-11-06 22:51:15,114 INFO L895 garLoopResultBuilder]: At program point L890(line 890) the Hoare annotation is: false [2023-11-06 22:51:15,115 INFO L895 garLoopResultBuilder]: At program point L956-2(lines 948 963) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-06 22:51:15,115 INFO L899 garLoopResultBuilder]: For program point L919(lines 918 967) no Hoare annotation was computed. [2023-11-06 22:51:15,115 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 220) no Hoare annotation was computed. [2023-11-06 22:51:15,115 INFO L899 garLoopResultBuilder]: For program point L948(lines 948 963) no Hoare annotation was computed. [2023-11-06 22:51:15,115 INFO L899 garLoopResultBuilder]: For program point L213-2(lines 213 220) no Hoare annotation was computed. [2023-11-06 22:51:15,116 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 193 202) the Hoare annotation is: true [2023-11-06 22:51:15,116 INFO L895 garLoopResultBuilder]: At program point L940(line 940) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-06 22:51:15,120 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 93 99) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:51:15,120 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 203 225) the Hoare annotation is: true [2023-11-06 22:51:15,121 INFO L895 garLoopResultBuilder]: At program point L965(lines 918 967) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-06 22:51:15,121 INFO L899 garLoopResultBuilder]: For program point L928(lines 928 934) no Hoare annotation was computed. [2023-11-06 22:51:15,121 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:51:15,121 INFO L899 garLoopResultBuilder]: For program point L928-1(lines 928 934) no Hoare annotation was computed. [2023-11-06 22:51:15,121 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:51:15,123 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2023-11-06 22:51:15,123 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 185 191) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:51:15,123 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:51:15,124 INFO L899 garLoopResultBuilder]: For program point L888(lines 888 894) no Hoare annotation was computed. [2023-11-06 22:51:15,124 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 888 894) no Hoare annotation was computed. [2023-11-06 22:51:15,124 INFO L902 garLoopResultBuilder]: At program point L971(lines 908 975) the Hoare annotation is: true [2023-11-06 22:51:15,125 INFO L899 garLoopResultBuilder]: For program point L938(lines 938 944) no Hoare annotation was computed. [2023-11-06 22:51:15,125 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:51:15,125 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 100 106) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:51:15,125 INFO L899 garLoopResultBuilder]: For program point L938-1(lines 938 944) no Hoare annotation was computed. [2023-11-06 22:51:15,125 INFO L895 garLoopResultBuilder]: At program point L930(line 930) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-06 22:51:15,126 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 884 898) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-06 22:51:15,126 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 107 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:51:15,126 INFO L895 garLoopResultBuilder]: At program point L968(lines 917 969) the Hoare annotation is: false [2023-11-06 22:51:15,126 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 245 256) no Hoare annotation was computed. [2023-11-06 22:51:15,126 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 245 256) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| ~waterLevel~0)) [2023-11-06 22:51:15,127 INFO L899 garLoopResultBuilder]: For program point L249-1(lines 245 256) no Hoare annotation was computed. [2023-11-06 22:51:15,129 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,129 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2023-11-06 22:51:15,129 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2023-11-06 22:51:15,129 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 310 318) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,129 INFO L899 garLoopResultBuilder]: For program point L874(lines 874 878) no Hoare annotation was computed. [2023-11-06 22:51:15,130 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 725 749) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,130 INFO L899 garLoopResultBuilder]: For program point L874-2(lines 874 878) no Hoare annotation was computed. [2023-11-06 22:51:15,130 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,130 INFO L899 garLoopResultBuilder]: For program point L744-1(lines 725 749) no Hoare annotation was computed. [2023-11-06 22:51:15,130 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 865 883) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,131 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 725 749) no Hoare annotation was computed. [2023-11-06 22:51:15,131 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:51:15,131 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 269 277) the Hoare annotation is: true [2023-11-06 22:51:15,131 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 809 819) no Hoare annotation was computed. [2023-11-06 22:51:15,133 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 809 819) the Hoare annotation is: true [2023-11-06 22:51:15,136 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 809 819) no Hoare annotation was computed. [2023-11-06 22:51:15,140 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:15,142 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:51:15,183 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:51:15 BoogieIcfgContainer [2023-11-06 22:51:15,183 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:51:15,184 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:51:15,184 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:51:15,184 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:51:15,185 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:11" (3/4) ... [2023-11-06 22:51:15,187 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:51:15,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:51:15,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:51:15,201 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:51:15,201 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:51:15,201 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:51:15,201 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:51:15,202 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:51:15,202 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:51:15,220 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:51:15,221 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:51:15,221 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:51:15,222 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:51:15,223 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:51:15,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,261 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,262 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:51:15,264 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:51:15,265 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) [2023-11-06 22:51:15,267 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (\result == 1))) [2023-11-06 22:51:15,268 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,268 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:51:15,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((tmp == 1) && (\result == 1))) && (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:51:15,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:51:15,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:51:15,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:51:15,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:51:15,331 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,331 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,331 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:51:15,332 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:51:15,332 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) [2023-11-06 22:51:15,333 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (\result == 1))) [2023-11-06 22:51:15,333 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:51:15,333 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:51:15,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((tmp == 1) && (\result == 1))) && (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:51:15,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:51:15,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 22:51:15,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:51:15,335 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:51:15,360 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:51:15,361 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:51:15,361 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:51:15,362 INFO L158 Benchmark]: Toolchain (without parser) took 5091.36ms. Allocated memory was 136.3MB in the beginning and 184.5MB in the end (delta: 48.2MB). Free memory was 90.9MB in the beginning and 96.4MB in the end (delta: -5.4MB). Peak memory consumption was 44.7MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,362 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 136.3MB. Free memory is still 82.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:51:15,363 INFO L158 Benchmark]: CACSL2BoogieTranslator took 557.31ms. Allocated memory is still 136.3MB. Free memory was 90.9MB in the beginning and 71.7MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,363 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.55ms. Allocated memory is still 136.3MB. Free memory was 71.7MB in the beginning and 69.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,364 INFO L158 Benchmark]: Boogie Preprocessor took 39.84ms. Allocated memory is still 136.3MB. Free memory was 69.3MB in the beginning and 67.9MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,364 INFO L158 Benchmark]: RCFGBuilder took 844.59ms. Allocated memory was 136.3MB in the beginning and 184.5MB in the end (delta: 48.2MB). Free memory was 67.9MB in the beginning and 145.4MB in the end (delta: -77.5MB). Peak memory consumption was 9.3MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,365 INFO L158 Benchmark]: TraceAbstraction took 3397.32ms. Allocated memory is still 184.5MB. Free memory was 144.5MB in the beginning and 103.7MB in the end (delta: 40.8MB). Peak memory consumption was 39.6MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,365 INFO L158 Benchmark]: Witness Printer took 177.33ms. Allocated memory is still 184.5MB. Free memory was 103.7MB in the beginning and 96.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:51:15,370 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 136.3MB. Free memory is still 82.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 557.31ms. Allocated memory is still 136.3MB. Free memory was 90.9MB in the beginning and 71.7MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.55ms. Allocated memory is still 136.3MB. Free memory was 71.7MB in the beginning and 69.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.84ms. Allocated memory is still 136.3MB. Free memory was 69.3MB in the beginning and 67.9MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 844.59ms. Allocated memory was 136.3MB in the beginning and 184.5MB in the end (delta: 48.2MB). Free memory was 67.9MB in the beginning and 145.4MB in the end (delta: -77.5MB). Peak memory consumption was 9.3MB. Max. memory is 16.1GB. * TraceAbstraction took 3397.32ms. Allocated memory is still 184.5MB. Free memory was 144.5MB in the beginning and 103.7MB in the end (delta: 40.8MB). Peak memory consumption was 39.6MB. Max. memory is 16.1GB. * Witness Printer took 177.33ms. Allocated memory is still 184.5MB. Free memory was 103.7MB in the beginning and 96.4MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [49] - GenericResultAtLocation [Line: 78]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [78] - GenericResultAtLocation [Line: 116]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [116] - GenericResultAtLocation [Line: 125]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [125] - GenericResultAtLocation [Line: 226]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [226] - GenericResultAtLocation [Line: 319]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [319] - GenericResultAtLocation [Line: 685]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [685] - GenericResultAtLocation [Line: 907]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [907] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 121]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.3s, OverallIterations: 6, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 333 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 328 mSDsluCounter, 1112 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 625 mSDsCounter, 36 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 106 IncrementalHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 36 mSolverCounterUnsat, 487 mSDtfsCounter, 106 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 37 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=197occurred in iteration=4, InterpolantAutomatonStates: 25, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 6 MinimizatonAttempts, 5 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 355 PreInvPairs, 405 NumberOfFragments, 355 HoareAnnotationTreeSize, 355 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 43 FomulaSimplificationsInter, 1152 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 154 NumberOfCodeBlocks, 154 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 148 ConstructedInterpolants, 0 QuantifiedInterpolants, 312 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 269]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 185]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (\result == 1))) - InvariantResult [Line: 107]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((tmp == 1) && (\result == 1))) && (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 310]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 751]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:51:15,411 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc89a3b4-78c9-44c6-98db-57832c547d73/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE