./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:32:49,091 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:32:49,207 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-12 02:32:49,219 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:32:49,220 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:32:49,255 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:32:49,257 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:32:49,257 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:32:49,258 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:32:49,266 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:32:49,268 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:32:49,268 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:32:49,269 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:32:49,271 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:32:49,271 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:32:49,272 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-12 02:32:49,272 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:32:49,272 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-12 02:32:49,273 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:32:49,273 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:32:49,274 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:32:49,275 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:32:49,275 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-12 02:32:49,276 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:32:49,276 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:32:49,277 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:32:49,277 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:32:49,278 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:32:49,278 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:32:49,279 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:32:49,280 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:32:49,281 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:32:49,281 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:32:49,281 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:32:49,282 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:32:49,282 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:32:49,282 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:32:49,283 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:32:49,283 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:32:49,283 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 [2023-11-12 02:32:49,579 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:32:49,602 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:32:49,606 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:32:49,608 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:32:49,608 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:32:49,610 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-12 02:32:52,621 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:32:52,904 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:32:52,905 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-12 02:32:52,919 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/data/5521ece53/5f1e61cd017449f1a4c4fb5f281880de/FLAG62f474c72 [2023-11-12 02:32:52,938 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/data/5521ece53/5f1e61cd017449f1a4c4fb5f281880de [2023-11-12 02:32:52,940 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:32:52,942 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:32:52,943 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:32:52,944 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:32:52,951 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:32:52,952 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:32:52" (1/1) ... [2023-11-12 02:32:52,953 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@58854c91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:52, skipping insertion in model container [2023-11-12 02:32:52,953 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:32:52" (1/1) ... [2023-11-12 02:32:53,008 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:32:53,249 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-12 02:32:53,269 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:32:53,281 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:32:53,291 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-12 02:32:53,293 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] [2023-11-12 02:32:53,293 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-11-12 02:32:53,294 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] [2023-11-12 02:32:53,294 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] [2023-11-12 02:32:53,294 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] [2023-11-12 02:32:53,294 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] [2023-11-12 02:32:53,295 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] [2023-11-12 02:32:53,346 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-12 02:32:53,356 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:32:53,379 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:32:53,380 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53 WrapperNode [2023-11-12 02:32:53,380 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:32:53,382 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:32:53,382 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:32:53,383 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:32:53,391 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,423 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,454 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 166 [2023-11-12 02:32:53,455 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:32:53,456 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:32:53,456 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:32:53,456 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:32:53,466 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,466 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,468 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,468 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,472 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,476 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,478 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,479 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,482 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:32:53,483 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:32:53,483 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:32:53,484 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:32:53,484 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (1/1) ... [2023-11-12 02:32:53,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:32:53,508 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:32:53,522 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:32:53,562 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:32:53,600 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:32:53,600 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-12 02:32:53,600 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-12 02:32:53,601 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-12 02:32:53,603 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-12 02:32:53,604 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-12 02:32:53,604 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-12 02:32:53,604 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:32:53,604 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:32:53,604 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-12 02:32:53,605 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-12 02:32:53,605 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-12 02:32:53,605 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-12 02:32:53,605 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:32:53,605 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-12 02:32:53,606 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-12 02:32:53,606 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:32:53,606 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:32:53,734 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:32:53,738 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:32:54,101 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:32:54,112 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:32:54,113 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-12 02:32:54,116 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:32:54 BoogieIcfgContainer [2023-11-12 02:32:54,117 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:32:54,121 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:32:54,122 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:32:54,126 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:32:54,126 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:32:52" (1/3) ... [2023-11-12 02:32:54,127 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6bdb364 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:32:54, skipping insertion in model container [2023-11-12 02:32:54,127 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:32:53" (2/3) ... [2023-11-12 02:32:54,127 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6bdb364 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:32:54, skipping insertion in model container [2023-11-12 02:32:54,128 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:32:54" (3/3) ... [2023-11-12 02:32:54,129 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product16.cil.c [2023-11-12 02:32:54,144 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:32:54,145 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:32:54,198 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:32:54,205 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6167b3e3, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:32:54,206 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:32:54,210 INFO L276 IsEmpty]: Start isEmpty. Operand has 79 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-12 02:32:54,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-12 02:32:54,219 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:54,220 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:54,220 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:54,225 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:54,225 INFO L85 PathProgramCache]: Analyzing trace with hash 1968968141, now seen corresponding path program 1 times [2023-11-12 02:32:54,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:54,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1840963808] [2023-11-12 02:32:54,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:54,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:54,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:54,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:54,473 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:54,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1840963808] [2023-11-12 02:32:54,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1840963808] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:54,475 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:54,475 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-12 02:32:54,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670252512] [2023-11-12 02:32:54,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:54,483 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-12 02:32:54,484 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:54,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-12 02:32:54,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:32:54,516 INFO L87 Difference]: Start difference. First operand has 79 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:54,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:54,565 INFO L93 Difference]: Finished difference Result 150 states and 201 transitions. [2023-11-12 02:32:54,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-12 02:32:54,567 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-12 02:32:54,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:54,576 INFO L225 Difference]: With dead ends: 150 [2023-11-12 02:32:54,577 INFO L226 Difference]: Without dead ends: 70 [2023-11-12 02:32:54,581 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:32:54,585 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:54,586 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:32:54,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2023-11-12 02:32:54,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2023-11-12 02:32:54,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 52 states have (on average 1.2884615384615385) internal successors, (67), 58 states have internal predecessors, (67), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-12 02:32:54,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 88 transitions. [2023-11-12 02:32:54,650 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 88 transitions. Word has length 19 [2023-11-12 02:32:54,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:54,651 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 88 transitions. [2023-11-12 02:32:54,652 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:54,652 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 88 transitions. [2023-11-12 02:32:54,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-12 02:32:54,656 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:54,656 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:54,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:32:54,657 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:54,658 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:54,658 INFO L85 PathProgramCache]: Analyzing trace with hash 676286126, now seen corresponding path program 1 times [2023-11-12 02:32:54,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:54,659 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51817733] [2023-11-12 02:32:54,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:54,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:54,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:54,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:54,860 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:54,861 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51817733] [2023-11-12 02:32:54,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51817733] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:54,861 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:54,862 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:32:54,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961832195] [2023-11-12 02:32:54,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:54,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:32:54,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:54,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:32:54,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:54,865 INFO L87 Difference]: Start difference. First operand 70 states and 88 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:54,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:54,881 INFO L93 Difference]: Finished difference Result 101 states and 125 transitions. [2023-11-12 02:32:54,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:32:54,882 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-12 02:32:54,882 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:54,883 INFO L225 Difference]: With dead ends: 101 [2023-11-12 02:32:54,884 INFO L226 Difference]: Without dead ends: 61 [2023-11-12 02:32:54,885 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:54,886 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 17 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:54,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 128 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:32:54,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-12 02:32:54,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-12 02:32:54,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 46 states have (on average 1.3043478260869565) internal successors, (60), 52 states have internal predecessors, (60), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-12 02:32:54,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2023-11-12 02:32:54,898 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 20 [2023-11-12 02:32:54,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:54,898 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2023-11-12 02:32:54,899 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:54,899 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2023-11-12 02:32:54,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-12 02:32:54,900 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:54,901 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:54,901 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:32:54,901 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:54,902 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:54,902 INFO L85 PathProgramCache]: Analyzing trace with hash 1105447611, now seen corresponding path program 1 times [2023-11-12 02:32:54,902 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:54,903 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429932425] [2023-11-12 02:32:54,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:54,903 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:54,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:55,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:55,029 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:55,029 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429932425] [2023-11-12 02:32:55,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429932425] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:55,032 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:55,033 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:32:55,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1005359513] [2023-11-12 02:32:55,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:55,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:32:55,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:55,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:32:55,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:55,042 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:55,094 INFO L93 Difference]: Finished difference Result 167 states and 213 transitions. [2023-11-12 02:32:55,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:32:55,101 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-12 02:32:55,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:55,108 INFO L225 Difference]: With dead ends: 167 [2023-11-12 02:32:55,110 INFO L226 Difference]: Without dead ends: 113 [2023-11-12 02:32:55,111 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:55,114 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 68 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:55,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 151 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:32:55,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2023-11-12 02:32:55,148 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 110. [2023-11-12 02:32:55,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 81 states have (on average 1.3333333333333333) internal successors, (108), 92 states have internal predecessors, (108), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-12 02:32:55,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 140 transitions. [2023-11-12 02:32:55,151 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 140 transitions. Word has length 25 [2023-11-12 02:32:55,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:55,151 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 140 transitions. [2023-11-12 02:32:55,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,152 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 140 transitions. [2023-11-12 02:32:55,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-12 02:32:55,153 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:55,153 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:55,154 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-12 02:32:55,154 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:55,155 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:55,155 INFO L85 PathProgramCache]: Analyzing trace with hash -698168017, now seen corresponding path program 1 times [2023-11-12 02:32:55,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:55,155 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790556371] [2023-11-12 02:32:55,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:55,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:55,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:55,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:55,303 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:55,303 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790556371] [2023-11-12 02:32:55,303 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790556371] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:55,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:55,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-12 02:32:55,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168161120] [2023-11-12 02:32:55,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:55,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:32:55,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:55,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:32:55,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:32:55,306 INFO L87 Difference]: Start difference. First operand 110 states and 140 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:55,407 INFO L93 Difference]: Finished difference Result 304 states and 401 transitions. [2023-11-12 02:32:55,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:32:55,408 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-11-12 02:32:55,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:55,412 INFO L225 Difference]: With dead ends: 304 [2023-11-12 02:32:55,412 INFO L226 Difference]: Without dead ends: 201 [2023-11-12 02:32:55,413 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:32:55,415 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 46 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:55,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 276 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:32:55,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2023-11-12 02:32:55,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 201. [2023-11-12 02:32:55,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 146 states have (on average 1.3150684931506849) internal successors, (192), 165 states have internal predecessors, (192), 32 states have call successors, (32), 24 states have call predecessors, (32), 22 states have return successors, (34), 20 states have call predecessors, (34), 32 states have call successors, (34) [2023-11-12 02:32:55,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 258 transitions. [2023-11-12 02:32:55,446 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 258 transitions. Word has length 28 [2023-11-12 02:32:55,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:55,447 INFO L495 AbstractCegarLoop]: Abstraction has 201 states and 258 transitions. [2023-11-12 02:32:55,447 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,447 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 258 transitions. [2023-11-12 02:32:55,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-12 02:32:55,450 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:55,451 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:55,451 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-12 02:32:55,451 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:55,452 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:55,452 INFO L85 PathProgramCache]: Analyzing trace with hash 344714708, now seen corresponding path program 1 times [2023-11-12 02:32:55,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:55,453 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171032540] [2023-11-12 02:32:55,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:55,453 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:55,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:55,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:55,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:55,613 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171032540] [2023-11-12 02:32:55,613 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171032540] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:55,613 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:55,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-12 02:32:55,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891979552] [2023-11-12 02:32:55,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:55,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:32:55,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:55,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:32:55,616 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:55,616 INFO L87 Difference]: Start difference. First operand 201 states and 258 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:55,639 INFO L93 Difference]: Finished difference Result 337 states and 441 transitions. [2023-11-12 02:32:55,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:32:55,640 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-12 02:32:55,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:55,642 INFO L225 Difference]: With dead ends: 337 [2023-11-12 02:32:55,642 INFO L226 Difference]: Without dead ends: 143 [2023-11-12 02:32:55,644 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:32:55,646 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 50 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:55,647 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 50 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:32:55,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2023-11-12 02:32:55,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 141. [2023-11-12 02:32:55,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 110 states have (on average 1.2545454545454546) internal successors, (138), 117 states have internal predecessors, (138), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (16), 14 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-12 02:32:55,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 170 transitions. [2023-11-12 02:32:55,664 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 170 transitions. Word has length 30 [2023-11-12 02:32:55,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:55,665 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 170 transitions. [2023-11-12 02:32:55,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:55,665 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 170 transitions. [2023-11-12 02:32:55,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-12 02:32:55,667 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:55,667 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:55,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-12 02:32:55,668 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:55,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:55,668 INFO L85 PathProgramCache]: Analyzing trace with hash -1162418059, now seen corresponding path program 1 times [2023-11-12 02:32:55,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:55,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [814815218] [2023-11-12 02:32:55,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:55,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:55,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:55,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:32:55,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:55,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:55,957 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:55,957 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [814815218] [2023-11-12 02:32:55,958 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [814815218] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:32:55,958 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:32:55,958 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:32:55,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [686246008] [2023-11-12 02:32:55,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:32:55,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-12 02:32:55,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:55,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-12 02:32:55,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:32:55,963 INFO L87 Difference]: Start difference. First operand 141 states and 170 transitions. Second operand has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:32:56,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:56,241 INFO L93 Difference]: Finished difference Result 285 states and 349 transitions. [2023-11-12 02:32:56,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-12 02:32:56,242 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-12 02:32:56,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:56,247 INFO L225 Difference]: With dead ends: 285 [2023-11-12 02:32:56,247 INFO L226 Difference]: Without dead ends: 213 [2023-11-12 02:32:56,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2023-11-12 02:32:56,257 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 134 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:56,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 246 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-12 02:32:56,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2023-11-12 02:32:56,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 207. [2023-11-12 02:32:56,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 160 states have (on average 1.24375) internal successors, (199), 173 states have internal predecessors, (199), 22 states have call successors, (22), 22 states have call predecessors, (22), 24 states have return successors, (24), 22 states have call predecessors, (24), 22 states have call successors, (24) [2023-11-12 02:32:56,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 245 transitions. [2023-11-12 02:32:56,292 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 245 transitions. Word has length 32 [2023-11-12 02:32:56,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:56,293 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 245 transitions. [2023-11-12 02:32:56,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:32:56,293 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 245 transitions. [2023-11-12 02:32:56,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-12 02:32:56,296 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:32:56,296 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:56,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-12 02:32:56,297 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:32:56,297 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:32:56,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1801888164, now seen corresponding path program 1 times [2023-11-12 02:32:56,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:32:56,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466173078] [2023-11-12 02:32:56,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:56,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:32:56,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:56,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:32:56,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:56,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:32:56,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:56,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-12 02:32:56,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:56,533 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-12 02:32:56,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:32:56,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466173078] [2023-11-12 02:32:56,534 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466173078] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-12 02:32:56,534 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1289457918] [2023-11-12 02:32:56,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:32:56,535 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-12 02:32:56,535 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:32:56,542 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-12 02:32:56,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-12 02:32:56,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:32:56,650 INFO L262 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-12 02:32:56,657 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-12 02:32:56,804 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-12 02:32:56,805 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-12 02:32:57,034 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:32:57,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1289457918] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-12 02:32:57,034 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-12 02:32:57,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 15 [2023-11-12 02:32:57,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870950080] [2023-11-12 02:32:57,035 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-12 02:32:57,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-12 02:32:57,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:32:57,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-12 02:32:57,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2023-11-12 02:32:57,038 INFO L87 Difference]: Start difference. First operand 207 states and 245 transitions. Second operand has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-12 02:32:57,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:32:57,284 INFO L93 Difference]: Finished difference Result 273 states and 326 transitions. [2023-11-12 02:32:57,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-12 02:32:57,284 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 54 [2023-11-12 02:32:57,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:32:57,285 INFO L225 Difference]: With dead ends: 273 [2023-11-12 02:32:57,285 INFO L226 Difference]: Without dead ends: 0 [2023-11-12 02:32:57,286 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 102 SyntacticMatches, 4 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=99, Invalid=281, Unknown=0, NotChecked=0, Total=380 [2023-11-12 02:32:57,287 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 96 mSDsluCounter, 317 mSDsCounter, 0 mSdLazyCounter, 196 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 196 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-12 02:32:57,287 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 379 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 196 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-12 02:32:57,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-12 02:32:57,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-12 02:32:57,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:32:57,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-12 02:32:57,289 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2023-11-12 02:32:57,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:32:57,289 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-12 02:32:57,289 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-12 02:32:57,289 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-12 02:32:57,290 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-12 02:32:57,298 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-12 02:32:57,304 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-12 02:32:57,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-12 02:32:57,506 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-12 02:32:58,078 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 739 746) no Hoare annotation was computed. [2023-11-12 02:32:58,078 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 746) the Hoare annotation is: true [2023-11-12 02:32:58,078 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 739 746) no Hoare annotation was computed. [2023-11-12 02:32:58,078 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-11-12 02:32:58,078 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2023-11-12 02:32:58,078 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-11-12 02:32:58,078 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 657 680) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L643(line 643) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 668 674) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 705) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 530 538) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 710) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2023-11-12 02:32:58,079 INFO L899 garLoopResultBuilder]: For program point L466-2(lines 462 473) no Hoare annotation was computed. [2023-11-12 02:32:58,080 INFO L899 garLoopResultBuilder]: For program point L661-1(lines 660 679) no Hoare annotation was computed. [2023-11-12 02:32:58,080 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 639 646) no Hoare annotation was computed. [2023-11-12 02:32:58,080 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 657 680) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-12 02:32:58,081 INFO L899 garLoopResultBuilder]: For program point L839(lines 839 845) no Hoare annotation was computed. [2023-11-12 02:32:58,081 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 848) no Hoare annotation was computed. [2023-11-12 02:32:58,081 INFO L899 garLoopResultBuilder]: For program point L835-1(lines 827 851) no Hoare annotation was computed. [2023-11-12 02:32:58,081 INFO L895 garLoopResultBuilder]: At program point L703(line 703) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-12 02:32:58,081 INFO L895 garLoopResultBuilder]: At program point L699(line 699) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-12 02:32:58,081 INFO L895 garLoopResultBuilder]: At program point L695(line 695) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-12 02:32:58,081 INFO L899 garLoopResultBuilder]: For program point L695-1(line 695) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 657 680) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 758 766) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 643) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L895 garLoopResultBuilder]: At program point L708(line 708) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 689 713) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 542 571) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point L567(lines 542 571) no Hoare annotation was computed. [2023-11-12 02:32:58,082 INFO L899 garLoopResultBuilder]: For program point L563(line 563) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 560) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L902 garLoopResultBuilder]: At program point L556-1(lines 556 560) the Hoare annotation is: true [2023-11-12 02:32:58,083 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 542 571) the Hoare annotation is: true [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point L553(line 553) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L902 garLoopResultBuilder]: At program point L552-2(lines 552 566) the Hoare annotation is: true [2023-11-12 02:32:58,083 INFO L902 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: true [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point L865(lines 865 869) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 818 825) no Hoare annotation was computed. [2023-11-12 02:32:58,083 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 605 614) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 64 70) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 615 637) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point L916(lines 853 920) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-12 02:32:58,084 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-12 02:32:58,084 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 597 603) no Hoare annotation was computed. [2023-11-12 02:32:58,085 INFO L895 garLoopResultBuilder]: At program point L809(line 809) the Hoare annotation is: false [2023-11-12 02:32:58,085 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-12 02:32:58,085 INFO L895 garLoopResultBuilder]: At program point L913(lines 862 914) the Hoare annotation is: false [2023-11-12 02:32:58,085 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-12 02:32:58,085 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 71 77) no Hoare annotation was computed. [2023-11-12 02:32:58,085 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-12 02:32:58,085 INFO L895 garLoopResultBuilder]: At program point L901-2(lines 893 908) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-12 02:32:58,085 INFO L899 garLoopResultBuilder]: For program point L864(lines 863 912) no Hoare annotation was computed. [2023-11-12 02:32:58,088 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 908) no Hoare annotation was computed. [2023-11-12 02:32:58,088 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-12 02:32:58,089 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 803 817) no Hoare annotation was computed. [2023-11-12 02:32:58,089 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 632) no Hoare annotation was computed. [2023-11-12 02:32:58,090 INFO L899 garLoopResultBuilder]: For program point L625-2(lines 625 632) no Hoare annotation was computed. [2023-11-12 02:32:58,090 INFO L895 garLoopResultBuilder]: At program point L910(lines 863 912) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-12 02:32:58,090 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 78 86) no Hoare annotation was computed. [2023-11-12 02:32:58,090 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-12 02:32:58,091 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 873 879) no Hoare annotation was computed. [2023-11-12 02:32:58,091 INFO L899 garLoopResultBuilder]: For program point L807(lines 807 813) no Hoare annotation was computed. [2023-11-12 02:32:58,091 INFO L899 garLoopResultBuilder]: For program point L807-1(lines 807 813) no Hoare annotation was computed. [2023-11-12 02:32:58,091 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-11-12 02:32:58,092 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2023-11-12 02:32:58,092 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-12 02:32:58,092 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 681 687) no Hoare annotation was computed. [2023-11-12 02:32:58,092 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 681 687) the Hoare annotation is: true [2023-11-12 02:32:58,092 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCritical_returnLabel#1(lines 498 506) no Hoare annotation was computed. [2023-11-12 02:32:58,093 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 747 757) no Hoare annotation was computed. [2023-11-12 02:32:58,093 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 747 757) the Hoare annotation is: true [2023-11-12 02:32:58,093 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 747 757) no Hoare annotation was computed. [2023-11-12 02:32:58,095 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:32:58,098 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2023-11-12 02:32:58,114 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.11 02:32:58 BoogieIcfgContainer [2023-11-12 02:32:58,114 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-12 02:32:58,115 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-12 02:32:58,115 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-12 02:32:58,115 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-12 02:32:58,116 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:32:54" (3/4) ... [2023-11-12 02:32:58,118 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-12 02:32:58,122 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-12 02:32:58,122 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-12 02:32:58,123 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-12 02:32:58,123 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-12 02:32:58,123 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-12 02:32:58,123 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:32:58,124 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-12 02:32:58,134 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-12 02:32:58,134 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-12 02:32:58,135 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-12 02:32:58,135 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:32:58,136 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:32:58,275 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/witness.graphml [2023-11-12 02:32:58,275 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/witness.yml [2023-11-12 02:32:58,275 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-12 02:32:58,276 INFO L158 Benchmark]: Toolchain (without parser) took 5333.90ms. Allocated memory was 186.6MB in the beginning and 237.0MB in the end (delta: 50.3MB). Free memory was 153.1MB in the beginning and 166.6MB in the end (delta: -13.5MB). Peak memory consumption was 39.8MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,276 INFO L158 Benchmark]: CDTParser took 0.55ms. Allocated memory is still 130.0MB. Free memory was 84.4MB in the beginning and 84.3MB in the end (delta: 159.6kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-12 02:32:58,276 INFO L158 Benchmark]: CACSL2BoogieTranslator took 437.48ms. Allocated memory is still 186.6MB. Free memory was 153.1MB in the beginning and 134.1MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,277 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.06ms. Allocated memory is still 186.6MB. Free memory was 134.1MB in the beginning and 132.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,277 INFO L158 Benchmark]: Boogie Preprocessor took 26.96ms. Allocated memory is still 186.6MB. Free memory was 132.0MB in the beginning and 130.7MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,278 INFO L158 Benchmark]: RCFGBuilder took 633.44ms. Allocated memory is still 186.6MB. Free memory was 130.1MB in the beginning and 115.2MB in the end (delta: 14.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,278 INFO L158 Benchmark]: TraceAbstraction took 3993.54ms. Allocated memory was 186.6MB in the beginning and 237.0MB in the end (delta: 50.3MB). Free memory was 114.6MB in the beginning and 174.0MB in the end (delta: -59.4MB). Peak memory consumption was 71.8MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,279 INFO L158 Benchmark]: Witness Printer took 160.30ms. Allocated memory is still 237.0MB. Free memory was 174.0MB in the beginning and 166.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-12 02:32:58,282 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.55ms. Allocated memory is still 130.0MB. Free memory was 84.4MB in the beginning and 84.3MB in the end (delta: 159.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 437.48ms. Allocated memory is still 186.6MB. Free memory was 153.1MB in the beginning and 134.1MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.06ms. Allocated memory is still 186.6MB. Free memory was 134.1MB in the beginning and 132.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.96ms. Allocated memory is still 186.6MB. Free memory was 132.0MB in the beginning and 130.7MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 633.44ms. Allocated memory is still 186.6MB. Free memory was 130.1MB in the beginning and 115.2MB in the end (delta: 14.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 3993.54ms. Allocated memory was 186.6MB in the beginning and 237.0MB in the end (delta: 50.3MB). Free memory was 114.6MB in the beginning and 174.0MB in the end (delta: -59.4MB). Peak memory consumption was 71.8MB. Max. memory is 16.1GB. * Witness Printer took 160.30ms. Allocated memory is still 237.0MB. Free memory was 174.0MB in the beginning and 166.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 539]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] - GenericResultAtLocation [Line: 647]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] - GenericResultAtLocation [Line: 826]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] - GenericResultAtLocation [Line: 852]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 643]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 79 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.9s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 402 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 395 mSDsluCounter, 1327 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 843 mSDsCounter, 63 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 321 IncrementalHoareTripleChecker+Invalid, 384 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 63 mSolverCounterUnsat, 484 mSDtfsCounter, 321 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 158 GetRequests, 114 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 83 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=207occurred in iteration=6, InterpolantAutomatonStates: 37, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 7 MinimizatonAttempts, 11 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 212 PreInvPairs, 232 NumberOfFragments, 236 HoareAnnotationTreeSize, 212 FomulaSimplifications, 216 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 20 FomulaSimplificationsInter, 655 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 262 NumberOfCodeBlocks, 262 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 307 ConstructedInterpolants, 0 QuantifiedInterpolants, 789 SizeOfPredicates, 0 NumberOfNonLiveVariables, 224 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 51/57 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-12 02:32:58,306 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9400c6c1-f9f9-4481-9c6a-1129c8a1587a/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE