./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5fa4f60085f64a1804e4aca4b7be9247f343df1e9c84e33b08f4411c844fb6fe --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:48:08,258 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:48:08,376 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:48:08,387 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:48:08,388 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:48:08,433 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:48:08,434 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:48:08,434 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:48:08,435 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:48:08,436 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:48:08,437 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:48:08,438 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:48:08,439 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:48:08,439 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:48:08,440 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:48:08,441 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:48:08,441 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:48:08,442 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:48:08,446 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:48:08,447 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:48:08,448 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:48:08,455 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:48:08,455 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:48:08,456 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:48:08,456 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:48:08,457 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:48:08,457 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:48:08,458 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:48:08,458 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:08,459 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:48:08,459 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:48:08,460 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:48:08,460 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:48:08,461 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:48:08,461 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:48:08,462 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:48:08,462 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:48:08,463 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:48:08,463 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:48:08,464 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5fa4f60085f64a1804e4aca4b7be9247f343df1e9c84e33b08f4411c844fb6fe [2023-11-06 22:48:08,836 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:48:08,883 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:48:08,887 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:48:08,891 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:48:08,891 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:48:08,893 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c [2023-11-06 22:48:12,628 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:48:12,978 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:48:12,979 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c [2023-11-06 22:48:13,005 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/data/e19d31a50/70a4a17727774b4fae8a8d08b499565a/FLAG759d310a1 [2023-11-06 22:48:13,026 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/data/e19d31a50/70a4a17727774b4fae8a8d08b499565a [2023-11-06 22:48:13,030 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:48:13,032 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:48:13,034 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:13,034 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:48:13,042 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:48:13,043 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,045 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a329ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13, skipping insertion in model container [2023-11-06 22:48:13,045 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,119 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:48:13,544 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c[16885,16898] [2023-11-06 22:48:13,564 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:13,579 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:48:13,593 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-06 22:48:13,595 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [220] [2023-11-06 22:48:13,596 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [292] [2023-11-06 22:48:13,596 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [393] [2023-11-06 22:48:13,597 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [428] [2023-11-06 22:48:13,597 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [479] [2023-11-06 22:48:13,598 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [845] [2023-11-06 22:48:13,598 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [854] [2023-11-06 22:48:13,677 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/sv-benchmarks/c/product-lines/minepump_spec5_product08.cil.c[16885,16898] [2023-11-06 22:48:13,689 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:13,734 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:48:13,734 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13 WrapperNode [2023-11-06 22:48:13,734 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:13,736 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:13,736 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:48:13,737 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:48:13,746 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,765 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,799 INFO L138 Inliner]: procedures = 54, calls = 98, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 171 [2023-11-06 22:48:13,799 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:13,800 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:48:13,801 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:48:13,801 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:48:13,812 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,812 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,815 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,816 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,822 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,828 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,831 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,833 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,836 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:48:13,838 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:48:13,838 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:48:13,839 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:48:13,840 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (1/1) ... [2023-11-06 22:48:13,849 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:13,870 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:13,886 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:48:13,938 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:48:13,989 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:48:13,989 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:48:13,990 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:48:13,990 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:48:13,993 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:48:13,994 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:48:13,994 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:48:13,994 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:48:13,995 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:48:13,995 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 22:48:13,995 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 22:48:13,995 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:48:13,996 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:48:13,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:48:13,996 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:48:13,997 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:48:13,997 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:48:13,998 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:48:14,175 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:48:14,178 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:48:14,738 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:48:14,747 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:48:14,748 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:48:14,751 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:14 BoogieIcfgContainer [2023-11-06 22:48:14,751 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:48:14,754 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:48:14,755 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:48:14,759 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:48:14,760 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:48:13" (1/3) ... [2023-11-06 22:48:14,761 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d427464 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:14, skipping insertion in model container [2023-11-06 22:48:14,761 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:13" (2/3) ... [2023-11-06 22:48:14,762 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d427464 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:14, skipping insertion in model container [2023-11-06 22:48:14,762 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:14" (3/3) ... [2023-11-06 22:48:14,764 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product08.cil.c [2023-11-06 22:48:14,788 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:48:14,788 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:48:14,863 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:48:14,875 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@474fd391, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:48:14,876 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:48:14,883 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 64 states have (on average 1.359375) internal successors, (87), 71 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:48:14,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:48:14,897 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:14,898 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:14,899 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:14,907 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:14,908 INFO L85 PathProgramCache]: Analyzing trace with hash 2083799756, now seen corresponding path program 1 times [2023-11-06 22:48:14,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:14,920 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117320194] [2023-11-06 22:48:14,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:14,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:15,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 22:48:15,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:48:15,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,185 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:15,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:15,186 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117320194] [2023-11-06 22:48:15,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117320194] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:15,187 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:15,188 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:48:15,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1399104720] [2023-11-06 22:48:15,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:15,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:48:15,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:15,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:48:15,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:15,237 INFO L87 Difference]: Start difference. First operand has 85 states, 64 states have (on average 1.359375) internal successors, (87), 71 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:15,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:15,278 INFO L93 Difference]: Finished difference Result 161 states and 216 transitions. [2023-11-06 22:48:15,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:48:15,280 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 22:48:15,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:15,292 INFO L225 Difference]: With dead ends: 161 [2023-11-06 22:48:15,293 INFO L226 Difference]: Without dead ends: 76 [2023-11-06 22:48:15,298 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:15,303 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:15,305 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:15,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-06 22:48:15,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-06 22:48:15,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 57 states have (on average 1.280701754385965) internal successors, (73), 63 states have internal predecessors, (73), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:48:15,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 96 transitions. [2023-11-06 22:48:15,365 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 96 transitions. Word has length 32 [2023-11-06 22:48:15,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:15,366 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 96 transitions. [2023-11-06 22:48:15,366 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:15,367 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 96 transitions. [2023-11-06 22:48:15,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 22:48:15,371 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:15,371 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:15,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:48:15,372 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:15,373 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:15,373 INFO L85 PathProgramCache]: Analyzing trace with hash 610828729, now seen corresponding path program 1 times [2023-11-06 22:48:15,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:15,374 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843138613] [2023-11-06 22:48:15,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:15,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:15,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:48:15,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:48:15,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,549 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:15,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:15,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843138613] [2023-11-06 22:48:15,550 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843138613] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:15,550 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:15,551 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:15,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895236166] [2023-11-06 22:48:15,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:15,553 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:15,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:15,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:15,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:15,555 INFO L87 Difference]: Start difference. First operand 76 states and 96 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:15,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:15,578 INFO L93 Difference]: Finished difference Result 112 states and 140 transitions. [2023-11-06 22:48:15,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:15,579 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 22:48:15,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:15,581 INFO L225 Difference]: With dead ends: 112 [2023-11-06 22:48:15,582 INFO L226 Difference]: Without dead ends: 67 [2023-11-06 22:48:15,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:15,585 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 17 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:15,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 144 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:15,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-06 22:48:15,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-06 22:48:15,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 51 states have (on average 1.2941176470588236) internal successors, (66), 57 states have internal predecessors, (66), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 22:48:15,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 84 transitions. [2023-11-06 22:48:15,614 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 84 transitions. Word has length 33 [2023-11-06 22:48:15,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:15,615 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 84 transitions. [2023-11-06 22:48:15,615 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:15,615 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 84 transitions. [2023-11-06 22:48:15,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 22:48:15,617 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:15,618 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:15,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:48:15,618 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:15,619 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:15,619 INFO L85 PathProgramCache]: Analyzing trace with hash -1722219882, now seen corresponding path program 1 times [2023-11-06 22:48:15,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:15,620 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687072837] [2023-11-06 22:48:15,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:15,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:15,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:15,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:48:15,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:15,947 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:15,948 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:15,948 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687072837] [2023-11-06 22:48:15,948 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687072837] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:15,949 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:15,949 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:48:15,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [262756683] [2023-11-06 22:48:15,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:15,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:48:15,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:15,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:48:15,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:15,952 INFO L87 Difference]: Start difference. First operand 67 states and 84 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:48:16,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:16,203 INFO L93 Difference]: Finished difference Result 173 states and 222 transitions. [2023-11-06 22:48:16,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:48:16,204 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 22:48:16,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:16,208 INFO L225 Difference]: With dead ends: 173 [2023-11-06 22:48:16,208 INFO L226 Difference]: Without dead ends: 114 [2023-11-06 22:48:16,209 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:48:16,211 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 145 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:16,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 289 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:16,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2023-11-06 22:48:16,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 111. [2023-11-06 22:48:16,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 84 states have (on average 1.3214285714285714) internal successors, (111), 93 states have internal predecessors, (111), 15 states have call successors, (15), 11 states have call predecessors, (15), 11 states have return successors, (16), 12 states have call predecessors, (16), 15 states have call successors, (16) [2023-11-06 22:48:16,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 142 transitions. [2023-11-06 22:48:16,287 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 142 transitions. Word has length 38 [2023-11-06 22:48:16,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:16,288 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 142 transitions. [2023-11-06 22:48:16,288 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:48:16,288 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 142 transitions. [2023-11-06 22:48:16,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:48:16,295 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:16,296 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:16,296 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:48:16,297 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:16,297 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:16,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1097447402, now seen corresponding path program 1 times [2023-11-06 22:48:16,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:16,300 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1348855432] [2023-11-06 22:48:16,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:16,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:16,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:16,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:48:16,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:16,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 22:48:16,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:16,644 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:48:16,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:16,645 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1348855432] [2023-11-06 22:48:16,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1348855432] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:16,646 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:16,646 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:16,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476471595] [2023-11-06 22:48:16,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:16,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:16,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:16,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:16,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:16,648 INFO L87 Difference]: Start difference. First operand 111 states and 142 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:16,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:16,812 INFO L93 Difference]: Finished difference Result 195 states and 254 transitions. [2023-11-06 22:48:16,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:48:16,818 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-06 22:48:16,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:16,819 INFO L225 Difference]: With dead ends: 195 [2023-11-06 22:48:16,819 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:48:16,821 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:48:16,823 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 32 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:16,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 207 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:16,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:48:16,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:48:16,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:48:16,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:48:16,825 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 41 [2023-11-06 22:48:16,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:16,826 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:48:16,826 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:48:16,826 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:48:16,826 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:48:16,830 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:48:16,830 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:48:16,833 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:48:17,307 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 133 140) no Hoare annotation was computed. [2023-11-06 22:48:17,307 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 133 140) the Hoare annotation is: true [2023-11-06 22:48:17,308 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 133 140) no Hoare annotation was computed. [2023-11-06 22:48:17,308 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 92 98) no Hoare annotation was computed. [2023-11-06 22:48:17,309 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 92 98) the Hoare annotation is: true [2023-11-06 22:48:17,309 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 881 892) the Hoare annotation is: true [2023-11-06 22:48:17,309 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 881 892) no Hoare annotation was computed. [2023-11-06 22:48:17,310 INFO L899 garLoopResultBuilder]: For program point L885-1(lines 881 892) no Hoare annotation was computed. [2023-11-06 22:48:17,310 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 294 323) no Hoare annotation was computed. [2023-11-06 22:48:17,310 INFO L902 garLoopResultBuilder]: At program point L319(lines 294 323) the Hoare annotation is: true [2023-11-06 22:48:17,311 INFO L899 garLoopResultBuilder]: For program point L315(line 315) no Hoare annotation was computed. [2023-11-06 22:48:17,311 INFO L899 garLoopResultBuilder]: For program point L308(lines 308 312) no Hoare annotation was computed. [2023-11-06 22:48:17,312 INFO L902 garLoopResultBuilder]: At program point L308-1(lines 308 312) the Hoare annotation is: true [2023-11-06 22:48:17,312 INFO L899 garLoopResultBuilder]: For program point L305(line 305) no Hoare annotation was computed. [2023-11-06 22:48:17,313 INFO L902 garLoopResultBuilder]: At program point L304-2(lines 304 318) the Hoare annotation is: true [2023-11-06 22:48:17,314 INFO L902 garLoopResultBuilder]: At program point L300(line 300) the Hoare annotation is: true [2023-11-06 22:48:17,315 INFO L899 garLoopResultBuilder]: For program point L300-1(line 300) no Hoare annotation was computed. [2023-11-06 22:48:17,315 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 294 323) the Hoare annotation is: true [2023-11-06 22:48:17,315 INFO L899 garLoopResultBuilder]: For program point L861(lines 861 865) no Hoare annotation was computed. [2023-11-06 22:48:17,316 INFO L895 garLoopResultBuilder]: At program point L861-2(lines 857 868) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,316 INFO L895 garLoopResultBuilder]: At program point L114(line 114) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,317 INFO L895 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,317 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 91) no Hoare annotation was computed. [2023-11-06 22:48:17,318 INFO L895 garLoopResultBuilder]: At program point L445(line 445) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,318 INFO L899 garLoopResultBuilder]: For program point L445-1(line 445) no Hoare annotation was computed. [2023-11-06 22:48:17,319 INFO L895 garLoopResultBuilder]: At program point L119(line 119) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:48:17,319 INFO L895 garLoopResultBuilder]: At program point L119-1(lines 100 124) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-06 22:48:17,320 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 925 933) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,320 INFO L899 garLoopResultBuilder]: For program point L850(line 850) no Hoare annotation was computed. [2023-11-06 22:48:17,320 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 472) no Hoare annotation was computed. [2023-11-06 22:48:17,321 INFO L899 garLoopResultBuilder]: For program point L458(lines 458 475) no Hoare annotation was computed. [2023-11-06 22:48:17,321 INFO L895 garLoopResultBuilder]: At program point L458-1(lines 450 478) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,322 INFO L899 garLoopResultBuilder]: For program point L463(lines 463 469) no Hoare annotation was computed. [2023-11-06 22:48:17,323 INFO L899 garLoopResultBuilder]: For program point L79-1(lines 79 85) no Hoare annotation was computed. [2023-11-06 22:48:17,324 INFO L899 garLoopResultBuilder]: For program point L108(lines 108 116) no Hoare annotation was computed. [2023-11-06 22:48:17,326 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 846 853) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,333 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 91) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,334 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 121) no Hoare annotation was computed. [2023-11-06 22:48:17,337 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 440 449) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,339 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 893 901) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,339 INFO L895 garLoopResultBuilder]: At program point L460(line 460) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 22:48:17,339 INFO L899 garLoopResultBuilder]: For program point L460-1(line 460) no Hoare annotation was computed. [2023-11-06 22:48:17,340 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 91) no Hoare annotation was computed. [2023-11-06 22:48:17,341 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 141 151) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 22:48:17,342 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 850) no Hoare annotation was computed. [2023-11-06 22:48:17,342 INFO L899 garLoopResultBuilder]: For program point L72(lines 72 78) no Hoare annotation was computed. [2023-11-06 22:48:17,343 INFO L899 garLoopResultBuilder]: For program point L72-2(lines 68 90) no Hoare annotation was computed. [2023-11-06 22:48:17,347 INFO L902 garLoopResultBuilder]: At program point L287(lines 224 291) the Hoare annotation is: true [2023-11-06 22:48:17,348 INFO L899 garLoopResultBuilder]: For program point L254(lines 254 260) no Hoare annotation was computed. [2023-11-06 22:48:17,348 INFO L899 garLoopResultBuilder]: For program point L254-1(lines 254 260) no Hoare annotation was computed. [2023-11-06 22:48:17,348 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 212 219) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,349 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1)) [2023-11-06 22:48:17,349 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 356 366) the Hoare annotation is: true [2023-11-06 22:48:17,349 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 405 411) the Hoare annotation is: (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,349 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 207) no Hoare annotation was computed. [2023-11-06 22:48:17,349 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 370 392) the Hoare annotation is: true [2023-11-06 22:48:17,350 INFO L899 garLoopResultBuilder]: For program point L201-1(lines 201 207) no Hoare annotation was computed. [2023-11-06 22:48:17,350 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:48:17,350 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:48:17,350 INFO L895 garLoopResultBuilder]: At program point L284(lines 233 285) the Hoare annotation is: false [2023-11-06 22:48:17,350 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 278) no Hoare annotation was computed. [2023-11-06 22:48:17,351 INFO L895 garLoopResultBuilder]: At program point L272-2(lines 264 279) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1)) [2023-11-06 22:48:17,351 INFO L899 garLoopResultBuilder]: For program point L235(lines 234 283) no Hoare annotation was computed. [2023-11-06 22:48:17,351 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 348 354) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~2#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,351 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 279) no Hoare annotation was computed. [2023-11-06 22:48:17,351 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:48:17,352 INFO L895 garLoopResultBuilder]: At program point L256(line 256) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1)) [2023-11-06 22:48:17,352 INFO L899 garLoopResultBuilder]: For program point L380(lines 380 387) no Hoare annotation was computed. [2023-11-06 22:48:17,352 INFO L899 garLoopResultBuilder]: For program point L380-2(lines 380 387) no Hoare annotation was computed. [2023-11-06 22:48:17,352 INFO L895 garLoopResultBuilder]: At program point L281(lines 234 283) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1)) [2023-11-06 22:48:17,356 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 432 439) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~2#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,356 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 250) no Hoare annotation was computed. [2023-11-06 22:48:17,357 INFO L899 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2023-11-06 22:48:17,357 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2023-11-06 22:48:17,357 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: false [2023-11-06 22:48:17,357 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:48:17,358 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 412 418) the Hoare annotation is: (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,358 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 197 211) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~2#1| 1)) [2023-11-06 22:48:17,358 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 419 427) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:48:17,358 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 869 880) no Hoare annotation was computed. [2023-11-06 22:48:17,358 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 869 880) the Hoare annotation is: true [2023-11-06 22:48:17,359 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 869 880) no Hoare annotation was computed. [2023-11-06 22:48:17,359 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 152 160) no Hoare annotation was computed. [2023-11-06 22:48:17,359 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 152 160) no Hoare annotation was computed. [2023-11-06 22:48:17,359 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 152 160) the Hoare annotation is: true [2023-11-06 22:48:17,362 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 22:48:17,366 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:48:17,387 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:48:17 BoogieIcfgContainer [2023-11-06 22:48:17,387 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:48:17,388 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:48:17,388 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:48:17,388 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:48:17,391 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:14" (3/4) ... [2023-11-06 22:48:17,394 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:48:17,399 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:48:17,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:48:17,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:48:17,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:48:17,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:48:17,401 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:48:17,402 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 22:48:17,414 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 16 nodes and edges [2023-11-06 22:48:17,415 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:48:17,416 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:48:17,417 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:48:17,417 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:48:17,455 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,457 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:48:17,459 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,460 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 22:48:17,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:48:17,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,522 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,522 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,522 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,522 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:48:17,523 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,524 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,524 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,525 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:48:17,528 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) [2023-11-06 22:48:17,528 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,529 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) [2023-11-06 22:48:17,529 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 22:48:17,529 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,529 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 22:48:17,559 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:48:17,559 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:48:17,559 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:48:17,560 INFO L158 Benchmark]: Toolchain (without parser) took 4528.36ms. Allocated memory is still 165.7MB. Free memory was 121.6MB in the beginning and 75.8MB in the end (delta: 45.8MB). Peak memory consumption was 46.5MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,561 INFO L158 Benchmark]: CDTParser took 0.43ms. Allocated memory is still 111.1MB. Free memory is still 59.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:48:17,561 INFO L158 Benchmark]: CACSL2BoogieTranslator took 700.94ms. Allocated memory is still 165.7MB. Free memory was 121.3MB in the beginning and 102.6MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,562 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.80ms. Allocated memory is still 165.7MB. Free memory was 102.6MB in the beginning and 100.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,562 INFO L158 Benchmark]: Boogie Preprocessor took 36.42ms. Allocated memory is still 165.7MB. Free memory was 100.3MB in the beginning and 98.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,562 INFO L158 Benchmark]: RCFGBuilder took 913.25ms. Allocated memory is still 165.7MB. Free memory was 98.8MB in the beginning and 132.5MB in the end (delta: -33.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,563 INFO L158 Benchmark]: TraceAbstraction took 2632.92ms. Allocated memory is still 165.7MB. Free memory was 131.9MB in the beginning and 83.1MB in the end (delta: 48.8MB). Peak memory consumption was 51.7MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,564 INFO L158 Benchmark]: Witness Printer took 171.64ms. Allocated memory is still 165.7MB. Free memory was 83.1MB in the beginning and 75.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:48:17,568 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.43ms. Allocated memory is still 111.1MB. Free memory is still 59.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 700.94ms. Allocated memory is still 165.7MB. Free memory was 121.3MB in the beginning and 102.6MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.80ms. Allocated memory is still 165.7MB. Free memory was 102.6MB in the beginning and 100.3MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.42ms. Allocated memory is still 165.7MB. Free memory was 100.3MB in the beginning and 98.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 913.25ms. Allocated memory is still 165.7MB. Free memory was 98.8MB in the beginning and 132.5MB in the end (delta: -33.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 2632.92ms. Allocated memory is still 165.7MB. Free memory was 131.9MB in the beginning and 83.1MB in the end (delta: 48.8MB). Peak memory consumption was 51.7MB. Max. memory is 16.1GB. * Witness Printer took 171.64ms. Allocated memory is still 165.7MB. Free memory was 83.1MB in the beginning and 75.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 220]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [220] - GenericResultAtLocation [Line: 292]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [292] - GenericResultAtLocation [Line: 393]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [393] - GenericResultAtLocation [Line: 428]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [428] - GenericResultAtLocation [Line: 479]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [479] - GenericResultAtLocation [Line: 845]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [845] - GenericResultAtLocation [Line: 854]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [854] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 850]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.5s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 199 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 194 mSDsluCounter, 745 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 408 mSDsCounter, 22 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 53 IncrementalHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 22 mSolverCounterUnsat, 337 mSDtfsCounter, 53 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 40 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=111occurred in iteration=3, InterpolantAutomatonStates: 17, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 209 PreInvPairs, 239 NumberOfFragments, 250 HoareAnnotationTreeSize, 209 FomulaSimplifications, 45 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 40 FomulaSimplificationsInter, 333 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 144 NumberOfCodeBlocks, 144 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 140 ConstructedInterpolants, 0 QuantifiedInterpolants, 240 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 12/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 348]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && !((0 == systemActive))) - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 925]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (\result == 1)) && !((0 == systemActive))) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && !((0 == systemActive))) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 450]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 857]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && !((0 == systemActive)))) - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:48:17,611 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_dd7db902-0036-4600-9601-584f03705c8f/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE