./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 27746ab44f558a6ebb6981088914ebe56dec54e6e61aba8484d841196c9545ea --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:01:17,097 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:01:17,216 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:01:17,228 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:01:17,229 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:01:17,266 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:01:17,267 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:01:17,267 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:01:17,268 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:01:17,273 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:01:17,274 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:01:17,275 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:01:17,275 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:01:17,277 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:01:17,278 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:01:17,278 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:01:17,278 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:01:17,279 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:01:17,279 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:01:17,280 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:01:17,280 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:01:17,281 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:01:17,281 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:01:17,282 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:01:17,282 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:01:17,283 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:01:17,283 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:01:17,284 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:01:17,284 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:01:17,285 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:01:17,286 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:01:17,286 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:01:17,286 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:01:17,287 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:01:17,287 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:01:17,287 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:01:17,287 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:01:17,288 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:01:17,288 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:01:17,288 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 27746ab44f558a6ebb6981088914ebe56dec54e6e61aba8484d841196c9545ea [2023-11-06 23:01:17,613 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:01:17,643 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:01:17,646 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:01:17,648 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:01:17,648 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:01:17,650 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c [2023-11-06 23:01:20,951 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:01:21,280 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:01:21,284 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c [2023-11-06 23:01:21,304 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/data/14f2d4a73/60f2a3d6c02e4696b0af5a537a8ba333/FLAGfa26892d2 [2023-11-06 23:01:21,320 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/data/14f2d4a73/60f2a3d6c02e4696b0af5a537a8ba333 [2023-11-06 23:01:21,326 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:01:21,327 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:01:21,330 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:01:21,331 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:01:21,336 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:01:21,337 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,338 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1b98047e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21, skipping insertion in model container [2023-11-06 23:01:21,338 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,395 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:01:21,682 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c[15131,15144] [2023-11-06 23:01:21,702 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:01:21,714 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:01:21,726 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 23:01:21,728 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [145] [2023-11-06 23:01:21,729 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [196] [2023-11-06 23:01:21,729 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [299] [2023-11-06 23:01:21,729 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [665] [2023-11-06 23:01:21,730 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [700] [2023-11-06 23:01:21,730 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [709] [2023-11-06 23:01:21,730 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [909] [2023-11-06 23:01:21,786 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c[15131,15144] [2023-11-06 23:01:21,818 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:01:21,851 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:01:21,852 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21 WrapperNode [2023-11-06 23:01:21,852 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:01:21,853 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:01:21,854 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:01:21,854 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:01:21,861 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,876 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,916 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 25, calls inlined = 19, statements flattened = 177 [2023-11-06 23:01:21,916 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:01:21,917 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:01:21,917 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:01:21,917 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:01:21,926 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,926 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,929 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,942 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,950 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,955 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,957 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,959 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,962 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:01:21,963 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:01:21,963 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:01:21,963 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:01:21,964 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (1/1) ... [2023-11-06 23:01:21,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:01:21,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:01:21,999 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:01:22,001 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:01:22,032 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:01:22,033 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:01:22,033 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:01:22,033 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:01:22,033 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:01:22,033 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:01:22,033 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:01:22,034 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:01:22,034 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:01:22,034 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 23:01:22,034 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 23:01:22,034 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 23:01:22,035 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 23:01:22,035 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:01:22,035 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:01:22,035 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:01:22,036 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:01:22,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:01:22,122 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:01:22,124 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:01:22,491 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:01:22,499 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:01:22,499 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:01:22,502 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:01:22 BoogieIcfgContainer [2023-11-06 23:01:22,502 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:01:22,505 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:01:22,505 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:01:22,509 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:01:22,509 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:01:21" (1/3) ... [2023-11-06 23:01:22,510 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a0f63b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:01:22, skipping insertion in model container [2023-11-06 23:01:22,510 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:01:21" (2/3) ... [2023-11-06 23:01:22,510 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a0f63b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:01:22, skipping insertion in model container [2023-11-06 23:01:22,510 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:01:22" (3/3) ... [2023-11-06 23:01:22,512 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product28.cil.c [2023-11-06 23:01:22,532 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:01:22,532 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:01:22,587 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:01:22,594 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@189d63c, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:01:22,594 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:01:22,599 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 23:01:22,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 23:01:22,611 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:01:22,611 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:01:22,612 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:01:22,618 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:01:22,618 INFO L85 PathProgramCache]: Analyzing trace with hash -1697011403, now seen corresponding path program 1 times [2023-11-06 23:01:22,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:01:22,629 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [902211445] [2023-11-06 23:01:22,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:01:22,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:01:22,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:22,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 23:01:22,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:22,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 23:01:22,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:22,831 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:01:22,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:01:22,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [902211445] [2023-11-06 23:01:22,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [902211445] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:01:22,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:01:22,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:01:22,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711393071] [2023-11-06 23:01:22,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:01:22,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:01:22,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:01:22,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:01:22,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:01:22,877 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.3636363636363635) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:01:22,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:01:22,920 INFO L93 Difference]: Finished difference Result 165 states and 222 transitions. [2023-11-06 23:01:22,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:01:22,923 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 23:01:22,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:01:22,932 INFO L225 Difference]: With dead ends: 165 [2023-11-06 23:01:22,932 INFO L226 Difference]: Without dead ends: 78 [2023-11-06 23:01:22,937 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:01:22,941 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:01:22,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:01:22,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-06 23:01:22,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-06 23:01:22,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.2881355932203389) internal successors, (76), 65 states have internal predecessors, (76), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 23:01:22,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2023-11-06 23:01:22,993 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 32 [2023-11-06 23:01:22,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:01:22,998 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2023-11-06 23:01:22,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:01:23,001 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2023-11-06 23:01:23,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 23:01:23,006 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:01:23,007 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:01:23,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:01:23,008 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:01:23,009 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:01:23,009 INFO L85 PathProgramCache]: Analyzing trace with hash -2086467875, now seen corresponding path program 1 times [2023-11-06 23:01:23,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:01:23,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765948134] [2023-11-06 23:01:23,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:01:23,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:01:23,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:01:23,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 23:01:23,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,239 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:01:23,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:01:23,240 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765948134] [2023-11-06 23:01:23,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765948134] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:01:23,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:01:23,241 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:01:23,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802820482] [2023-11-06 23:01:23,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:01:23,243 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:01:23,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:01:23,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:01:23,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:01:23,245 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:01:23,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:01:23,272 INFO L93 Difference]: Finished difference Result 116 states and 146 transitions. [2023-11-06 23:01:23,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:01:23,273 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 23:01:23,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:01:23,275 INFO L225 Difference]: With dead ends: 116 [2023-11-06 23:01:23,276 INFO L226 Difference]: Without dead ends: 69 [2023-11-06 23:01:23,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:01:23,279 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 17 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:01:23,280 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 150 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:01:23,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-06 23:01:23,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-06 23:01:23,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 53 states have (on average 1.3018867924528301) internal successors, (69), 59 states have internal predecessors, (69), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 23:01:23,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 87 transitions. [2023-11-06 23:01:23,294 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 87 transitions. Word has length 33 [2023-11-06 23:01:23,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:01:23,295 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 87 transitions. [2023-11-06 23:01:23,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:01:23,295 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 87 transitions. [2023-11-06 23:01:23,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 23:01:23,297 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:01:23,298 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:01:23,298 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:01:23,298 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:01:23,299 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:01:23,299 INFO L85 PathProgramCache]: Analyzing trace with hash -524286602, now seen corresponding path program 1 times [2023-11-06 23:01:23,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:01:23,300 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644043901] [2023-11-06 23:01:23,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:01:23,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:01:23,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:01:23,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 23:01:23,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,461 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:01:23,462 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:01:23,462 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644043901] [2023-11-06 23:01:23,463 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1644043901] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:01:23,463 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:01:23,463 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:01:23,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024506801] [2023-11-06 23:01:23,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:01:23,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:01:23,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:01:23,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:01:23,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:01:23,466 INFO L87 Difference]: Start difference. First operand 69 states and 87 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:01:23,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:01:23,505 INFO L93 Difference]: Finished difference Result 189 states and 244 transitions. [2023-11-06 23:01:23,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:01:23,506 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 23:01:23,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:01:23,508 INFO L225 Difference]: With dead ends: 189 [2023-11-06 23:01:23,509 INFO L226 Difference]: Without dead ends: 128 [2023-11-06 23:01:23,510 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:01:23,511 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 75 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:01:23,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 176 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:01:23,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2023-11-06 23:01:23,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2023-11-06 23:01:23,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.3297872340425532) internal successors, (125), 105 states have internal predecessors, (125), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 23:01:23,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 161 transitions. [2023-11-06 23:01:23,539 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 161 transitions. Word has length 38 [2023-11-06 23:01:23,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:01:23,540 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 161 transitions. [2023-11-06 23:01:23,540 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:01:23,540 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 161 transitions. [2023-11-06 23:01:23,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 23:01:23,543 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:01:23,543 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:01:23,543 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:01:23,544 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:01:23,544 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:01:23,545 INFO L85 PathProgramCache]: Analyzing trace with hash -1086926627, now seen corresponding path program 1 times [2023-11-06 23:01:23,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:01:23,545 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2036978258] [2023-11-06 23:01:23,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:01:23,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:01:23,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 23:01:23,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 23:01:23,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:01:23,723 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:01:23,723 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:01:23,725 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2036978258] [2023-11-06 23:01:23,726 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2036978258] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:01:23,726 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:01:23,726 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:01:23,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [78329157] [2023-11-06 23:01:23,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:01:23,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:01:23,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:01:23,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:01:23,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:01:23,731 INFO L87 Difference]: Start difference. First operand 125 states and 161 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:01:23,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:01:23,904 INFO L93 Difference]: Finished difference Result 214 states and 277 transitions. [2023-11-06 23:01:23,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:01:23,906 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2023-11-06 23:01:23,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:01:23,907 INFO L225 Difference]: With dead ends: 214 [2023-11-06 23:01:23,909 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:01:23,912 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 23:01:23,917 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 55 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:01:23,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 207 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:01:23,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:01:23,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:01:23,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:01:23,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:01:23,923 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 41 [2023-11-06 23:01:23,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:01:23,926 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:01:23,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:01:23,927 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:01:23,927 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:01:23,930 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:01:23,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:01:23,933 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:01:24,247 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 803 810) no Hoare annotation was computed. [2023-11-06 23:01:24,248 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 803 810) the Hoare annotation is: true [2023-11-06 23:01:24,248 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 803 810) no Hoare annotation was computed. [2023-11-06 23:01:24,249 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 744 750) no Hoare annotation was computed. [2023-11-06 23:01:24,249 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 744 750) the Hoare annotation is: true [2023-11-06 23:01:24,249 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: true [2023-11-06 23:01:24,250 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 23:01:24,251 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 23:01:24,251 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,251 INFO L895 garLoopResultBuilder]: At program point L762(line 762) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,251 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2023-11-06 23:01:24,252 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 136 144) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,253 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 717 743) no Hoare annotation was computed. [2023-11-06 23:01:24,253 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,254 INFO L895 garLoopResultBuilder]: At program point L771-1(lines 752 776) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,255 INFO L899 garLoopResultBuilder]: For program point L705(line 705) no Hoare annotation was computed. [2023-11-06 23:01:24,255 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 127 135) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,255 INFO L895 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,256 INFO L899 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2023-11-06 23:01:24,256 INFO L899 garLoopResultBuilder]: For program point L731-1(lines 731 737) no Hoare annotation was computed. [2023-11-06 23:01:24,256 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 768) no Hoare annotation was computed. [2023-11-06 23:01:24,258 INFO L899 garLoopResultBuilder]: For program point L756(lines 756 773) no Hoare annotation was computed. [2023-11-06 23:01:24,258 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2023-11-06 23:01:24,258 INFO L899 garLoopResultBuilder]: For program point L876-2(lines 876 880) no Hoare annotation was computed. [2023-11-06 23:01:24,259 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 701 708) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,259 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 717 743) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,260 INFO L895 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,260 INFO L899 garLoopResultBuilder]: For program point L162-1(line 162) no Hoare annotation was computed. [2023-11-06 23:01:24,261 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 23:01:24,261 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 867 885) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,262 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-06 23:01:24,262 INFO L899 garLoopResultBuilder]: For program point L724(lines 724 730) no Hoare annotation was computed. [2023-11-06 23:01:24,262 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 189) no Hoare annotation was computed. [2023-11-06 23:01:24,263 INFO L899 garLoopResultBuilder]: For program point L724-2(lines 720 742) no Hoare annotation was computed. [2023-11-06 23:01:24,263 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 157 166) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,264 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 192) no Hoare annotation was computed. [2023-11-06 23:01:24,266 INFO L895 garLoopResultBuilder]: At program point L175-1(lines 167 195) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-06 23:01:24,266 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 717 743) no Hoare annotation was computed. [2023-11-06 23:01:24,266 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 705) no Hoare annotation was computed. [2023-11-06 23:01:24,266 INFO L902 garLoopResultBuilder]: At program point L224(lines 199 228) the Hoare annotation is: true [2023-11-06 23:01:24,267 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 199 228) no Hoare annotation was computed. [2023-11-06 23:01:24,267 INFO L899 garLoopResultBuilder]: For program point L220(line 220) no Hoare annotation was computed. [2023-11-06 23:01:24,267 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 217) no Hoare annotation was computed. [2023-11-06 23:01:24,267 INFO L902 garLoopResultBuilder]: At program point L213-1(lines 213 217) the Hoare annotation is: true [2023-11-06 23:01:24,267 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2023-11-06 23:01:24,268 INFO L902 garLoopResultBuilder]: At program point L209-2(lines 209 223) the Hoare annotation is: true [2023-11-06 23:01:24,268 INFO L902 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: true [2023-11-06 23:01:24,268 INFO L899 garLoopResultBuilder]: For program point L205-1(line 205) no Hoare annotation was computed. [2023-11-06 23:01:24,268 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 228) the Hoare annotation is: true [2023-11-06 23:01:24,269 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 901 908) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,269 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 896) no Hoare annotation was computed. [2023-11-06 23:01:24,269 INFO L899 garLoopResultBuilder]: For program point L890-1(lines 890 896) no Hoare annotation was computed. [2023-11-06 23:01:24,269 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 262 272) the Hoare annotation is: true [2023-11-06 23:01:24,269 INFO L902 garLoopResultBuilder]: At program point L973(lines 910 977) the Hoare annotation is: true [2023-11-06 23:01:24,270 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2023-11-06 23:01:24,270 INFO L899 garLoopResultBuilder]: For program point L940-1(lines 940 946) no Hoare annotation was computed. [2023-11-06 23:01:24,270 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 677 683) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:01:24,270 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 276 298) the Hoare annotation is: true [2023-11-06 23:01:24,270 INFO L895 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,271 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:01:24,271 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:01:24,271 INFO L895 garLoopResultBuilder]: At program point L970(lines 919 971) the Hoare annotation is: false [2023-11-06 23:01:24,271 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 254 260) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:01:24,271 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:01:24,272 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2023-11-06 23:01:24,272 INFO L895 garLoopResultBuilder]: At program point L892(line 892) the Hoare annotation is: false [2023-11-06 23:01:24,272 INFO L895 garLoopResultBuilder]: At program point L958-2(lines 950 965) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,272 INFO L899 garLoopResultBuilder]: For program point L921(lines 920 969) no Hoare annotation was computed. [2023-11-06 23:01:24,273 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 149 156) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:01:24,273 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 965) no Hoare annotation was computed. [2023-11-06 23:01:24,273 INFO L895 garLoopResultBuilder]: At program point L942(line 942) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,273 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:01:24,273 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 684 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:01:24,274 INFO L895 garLoopResultBuilder]: At program point L967(lines 920 969) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,274 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 936) no Hoare annotation was computed. [2023-11-06 23:01:24,274 INFO L899 garLoopResultBuilder]: For program point L930-1(lines 930 936) no Hoare annotation was computed. [2023-11-06 23:01:24,274 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2023-11-06 23:01:24,274 INFO L899 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2023-11-06 23:01:24,275 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2023-11-06 23:01:24,275 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 886 900) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-06 23:01:24,275 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 691 699) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0)) [2023-11-06 23:01:24,275 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 23:01:24,275 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 23:01:24,276 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: true [2023-11-06 23:01:24,276 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 822 830) no Hoare annotation was computed. [2023-11-06 23:01:24,276 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 822 830) no Hoare annotation was computed. [2023-11-06 23:01:24,276 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 822 830) the Hoare annotation is: true [2023-11-06 23:01:24,279 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-06 23:01:24,282 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:01:24,304 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:01:24 BoogieIcfgContainer [2023-11-06 23:01:24,306 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:01:24,306 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:01:24,307 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:01:24,307 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:01:24,307 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:01:22" (3/4) ... [2023-11-06 23:01:24,310 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:01:24,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 23:01:24,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:01:24,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:01:24,318 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:01:24,319 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:01:24,319 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:01:24,319 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 23:01:24,328 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 23:01:24,328 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:01:24,329 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:01:24,330 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:01:24,330 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:01:24,361 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,362 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,363 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,364 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,365 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,400 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,400 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,401 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,401 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,401 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,402 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-06 23:01:24,402 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,402 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !((\old(pumpRunning) == 0)) [2023-11-06 23:01:24,424 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:01:24,428 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:01:24,428 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:01:24,429 INFO L158 Benchmark]: Toolchain (without parser) took 3101.64ms. Allocated memory was 127.9MB in the beginning and 178.3MB in the end (delta: 50.3MB). Free memory was 81.5MB in the beginning and 113.2MB in the end (delta: -31.7MB). Peak memory consumption was 21.2MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,429 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory is still 101.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:01:24,430 INFO L158 Benchmark]: CACSL2BoogieTranslator took 522.18ms. Allocated memory is still 127.9MB. Free memory was 81.5MB in the beginning and 62.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,430 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.14ms. Allocated memory is still 127.9MB. Free memory was 62.1MB in the beginning and 60.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,431 INFO L158 Benchmark]: Boogie Preprocessor took 44.80ms. Allocated memory is still 127.9MB. Free memory was 60.0MB in the beginning and 58.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,431 INFO L158 Benchmark]: RCFGBuilder took 539.25ms. Allocated memory was 127.9MB in the beginning and 178.3MB in the end (delta: 50.3MB). Free memory was 58.4MB in the beginning and 145.6MB in the end (delta: -87.1MB). Peak memory consumption was 18.3MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,432 INFO L158 Benchmark]: TraceAbstraction took 1800.85ms. Allocated memory is still 178.3MB. Free memory was 144.5MB in the beginning and 120.6MB in the end (delta: 24.0MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,432 INFO L158 Benchmark]: Witness Printer took 121.88ms. Allocated memory is still 178.3MB. Free memory was 120.6MB in the beginning and 113.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 23:01:24,436 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory is still 101.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 522.18ms. Allocated memory is still 127.9MB. Free memory was 81.5MB in the beginning and 62.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.14ms. Allocated memory is still 127.9MB. Free memory was 62.1MB in the beginning and 60.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.80ms. Allocated memory is still 127.9MB. Free memory was 60.0MB in the beginning and 58.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 539.25ms. Allocated memory was 127.9MB in the beginning and 178.3MB in the end (delta: 50.3MB). Free memory was 58.4MB in the beginning and 145.6MB in the end (delta: -87.1MB). Peak memory consumption was 18.3MB. Max. memory is 16.1GB. * TraceAbstraction took 1800.85ms. Allocated memory is still 178.3MB. Free memory was 144.5MB in the beginning and 120.6MB in the end (delta: 24.0MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. * Witness Printer took 121.88ms. Allocated memory is still 178.3MB. Free memory was 120.6MB in the beginning and 113.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 145]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [145] - GenericResultAtLocation [Line: 196]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [196] - GenericResultAtLocation [Line: 299]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [299] - GenericResultAtLocation [Line: 665]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [665] - GenericResultAtLocation [Line: 700]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [700] - GenericResultAtLocation [Line: 709]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [709] - GenericResultAtLocation [Line: 909]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [909] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 705]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 153 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 147 mSDsluCounter, 641 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 288 mSDsCounter, 5 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 45 IncrementalHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5 mSolverCounterUnsat, 353 mSDtfsCounter, 45 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 32 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=125occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 213 PreInvPairs, 239 NumberOfFragments, 183 HoareAnnotationTreeSize, 213 FomulaSimplifications, 8 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 40 FomulaSimplificationsInter, 310 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 144 NumberOfCodeBlocks, 144 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 140 ConstructedInterpolants, 0 QuantifiedInterpolants, 178 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 12/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 254]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (splverifierCounter == 0)) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 867]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 684]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (1 == systemActive)) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 752]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) - InvariantResult [Line: 910]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: !((\old(pumpRunning) == 0)) - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 23:01:24,466 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1d643486-3604-4d57-ba47-1d04f6aade49/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE