./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:28:51,975 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:28:52,096 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-12 02:28:52,104 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:28:52,105 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:28:52,149 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:28:52,150 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:28:52,151 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:28:52,152 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:28:52,157 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:28:52,158 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:28:52,159 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:28:52,159 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:28:52,161 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:28:52,162 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:28:52,162 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-12 02:28:52,163 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:28:52,163 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-12 02:28:52,164 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:28:52,164 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:28:52,165 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:28:52,165 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:28:52,166 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-12 02:28:52,166 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:28:52,167 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:28:52,168 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:28:52,168 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:28:52,169 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:28:52,194 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:28:52,195 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:28:52,195 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:28:52,196 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:28:52,196 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:28:52,197 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:28:52,197 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:28:52,197 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:28:52,198 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:28:52,198 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:28:52,199 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:28:52,199 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 [2023-11-12 02:28:52,530 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:28:52,573 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:28:52,576 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:28:52,578 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:28:52,578 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:28:52,580 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-12 02:28:55,658 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:28:55,996 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:28:55,999 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-12 02:28:56,018 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/data/b4aa91d78/a6da70a39d7646e89a632dccf18344b4/FLAG4e7e27e4d [2023-11-12 02:28:56,037 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/data/b4aa91d78/a6da70a39d7646e89a632dccf18344b4 [2023-11-12 02:28:56,043 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:28:56,046 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:28:56,052 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:28:56,052 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:28:56,087 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:28:56,087 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,089 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4e4e4cfe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56, skipping insertion in model container [2023-11-12 02:28:56,089 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,168 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:28:56,507 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-12 02:28:56,512 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:28:56,526 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:28:56,538 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-12 02:28:56,540 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] [2023-11-12 02:28:56,540 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] [2023-11-12 02:28:56,541 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] [2023-11-12 02:28:56,541 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] [2023-11-12 02:28:56,541 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] [2023-11-12 02:28:56,542 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] [2023-11-12 02:28:56,542 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] [2023-11-12 02:28:56,620 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-12 02:28:56,621 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:28:56,641 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:28:56,641 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56 WrapperNode [2023-11-12 02:28:56,641 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:28:56,643 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:28:56,643 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:28:56,643 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:28:56,652 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,669 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,707 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 18, statements flattened = 193 [2023-11-12 02:28:56,707 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:28:56,708 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:28:56,709 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:28:56,709 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:28:56,719 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,719 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,722 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,722 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,733 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,740 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,742 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,744 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,747 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:28:56,748 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:28:56,748 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:28:56,748 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:28:56,749 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (1/1) ... [2023-11-12 02:28:56,781 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:28:56,798 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:28:56,826 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:28:56,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:28:56,869 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:28:56,869 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-12 02:28:56,870 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-12 02:28:56,870 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-12 02:28:56,872 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-12 02:28:56,873 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-12 02:28:56,873 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-12 02:28:56,873 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-12 02:28:56,873 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-12 02:28:56,873 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:28:56,874 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:28:56,874 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-12 02:28:56,874 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-12 02:28:56,874 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-12 02:28:56,874 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-12 02:28:56,875 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:28:56,875 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-12 02:28:56,876 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-12 02:28:56,876 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:28:56,877 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:28:57,001 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:28:57,003 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:28:57,393 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:28:57,402 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:28:57,402 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-12 02:28:57,417 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:28:57 BoogieIcfgContainer [2023-11-12 02:28:57,418 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:28:57,421 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:28:57,438 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:28:57,442 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:28:57,442 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:28:56" (1/3) ... [2023-11-12 02:28:57,443 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@679a9c95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:28:57, skipping insertion in model container [2023-11-12 02:28:57,443 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:28:56" (2/3) ... [2023-11-12 02:28:57,446 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@679a9c95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:28:57, skipping insertion in model container [2023-11-12 02:28:57,446 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:28:57" (3/3) ... [2023-11-12 02:28:57,448 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product30.cil.c [2023-11-12 02:28:57,498 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:28:57,498 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:28:57,578 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:28:57,598 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2b572fbb, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:28:57,599 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:28:57,604 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 64 states have (on average 1.375) internal successors, (88), 72 states have internal predecessors, (88), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-12 02:28:57,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-12 02:28:57,614 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:28:57,615 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:28:57,616 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:28:57,623 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:28:57,624 INFO L85 PathProgramCache]: Analyzing trace with hash 1651489756, now seen corresponding path program 1 times [2023-11-12 02:28:57,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:28:57,634 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2099896334] [2023-11-12 02:28:57,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:28:57,636 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:28:57,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:57,876 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:28:57,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:28:57,877 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2099896334] [2023-11-12 02:28:57,878 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2099896334] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:28:57,878 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:28:57,878 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-12 02:28:57,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1898960326] [2023-11-12 02:28:57,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:28:57,886 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-12 02:28:57,887 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:28:57,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-12 02:28:57,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:28:57,935 INFO L87 Difference]: Start difference. First operand has 87 states, 64 states have (on average 1.375) internal successors, (88), 72 states have internal predecessors, (88), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:57,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:28:57,996 INFO L93 Difference]: Finished difference Result 166 states and 223 transitions. [2023-11-12 02:28:57,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-12 02:28:57,998 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-12 02:28:57,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:28:58,009 INFO L225 Difference]: With dead ends: 166 [2023-11-12 02:28:58,011 INFO L226 Difference]: Without dead ends: 78 [2023-11-12 02:28:58,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-12 02:28:58,023 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:28:58,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:28:58,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-12 02:28:58,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-12 02:28:58,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.2982456140350878) internal successors, (74), 64 states have internal predecessors, (74), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-12 02:28:58,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2023-11-12 02:28:58,088 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 19 [2023-11-12 02:28:58,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:28:58,089 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2023-11-12 02:28:58,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:58,089 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2023-11-12 02:28:58,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-12 02:28:58,091 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:28:58,092 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:28:58,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:28:58,092 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:28:58,093 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:28:58,093 INFO L85 PathProgramCache]: Analyzing trace with hash -1176523386, now seen corresponding path program 1 times [2023-11-12 02:28:58,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:28:58,094 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551615877] [2023-11-12 02:28:58,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:28:58,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:28:58,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:58,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:28:58,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:28:58,187 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551615877] [2023-11-12 02:28:58,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [551615877] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:28:58,187 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:28:58,187 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 02:28:58,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [924163145] [2023-11-12 02:28:58,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:28:58,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 02:28:58,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:28:58,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 02:28:58,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:28:58,190 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:58,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:28:58,206 INFO L93 Difference]: Finished difference Result 121 states and 153 transitions. [2023-11-12 02:28:58,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 02:28:58,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-12 02:28:58,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:28:58,208 INFO L225 Difference]: With dead ends: 121 [2023-11-12 02:28:58,209 INFO L226 Difference]: Without dead ends: 69 [2023-11-12 02:28:58,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 02:28:58,211 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 13 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:28:58,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 155 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:28:58,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-12 02:28:58,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-12 02:28:58,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 51 states have (on average 1.3137254901960784) internal successors, (67), 58 states have internal predecessors, (67), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-12 02:28:58,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 87 transitions. [2023-11-12 02:28:58,223 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 87 transitions. Word has length 20 [2023-11-12 02:28:58,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:28:58,224 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 87 transitions. [2023-11-12 02:28:58,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:58,224 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 87 transitions. [2023-11-12 02:28:58,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-12 02:28:58,226 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:28:58,226 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:28:58,226 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:28:58,226 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:28:58,227 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:28:58,227 INFO L85 PathProgramCache]: Analyzing trace with hash 59160395, now seen corresponding path program 1 times [2023-11-12 02:28:58,227 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:28:58,227 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489158979] [2023-11-12 02:28:58,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:28:58,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:28:58,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:58,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:28:58,466 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:28:58,467 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489158979] [2023-11-12 02:28:58,467 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489158979] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:28:58,467 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:28:58,468 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-12 02:28:58,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020821133] [2023-11-12 02:28:58,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:28:58,469 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:28:58,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:28:58,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:28:58,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:28:58,471 INFO L87 Difference]: Start difference. First operand 69 states and 87 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:58,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:28:58,578 INFO L93 Difference]: Finished difference Result 131 states and 168 transitions. [2023-11-12 02:28:58,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:28:58,579 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-12 02:28:58,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:28:58,581 INFO L225 Difference]: With dead ends: 131 [2023-11-12 02:28:58,581 INFO L226 Difference]: Without dead ends: 69 [2023-11-12 02:28:58,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:28:58,584 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 112 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:28:58,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 208 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-12 02:28:58,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-12 02:28:58,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-12 02:28:58,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 51 states have (on average 1.2941176470588236) internal successors, (66), 58 states have internal predecessors, (66), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-12 02:28:58,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 86 transitions. [2023-11-12 02:28:58,599 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 86 transitions. Word has length 25 [2023-11-12 02:28:58,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:28:58,600 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 86 transitions. [2023-11-12 02:28:58,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:28:58,600 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 86 transitions. [2023-11-12 02:28:58,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-12 02:28:58,602 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:28:58,602 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:28:58,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-12 02:28:58,603 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:28:58,604 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:28:58,604 INFO L85 PathProgramCache]: Analyzing trace with hash 1213028198, now seen corresponding path program 1 times [2023-11-12 02:28:58,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:28:58,604 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [596893848] [2023-11-12 02:28:58,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:28:58,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:28:58,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:58,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-12 02:28:58,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:58,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:28:58,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:58,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:28:58,828 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:28:58,829 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [596893848] [2023-11-12 02:28:58,829 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [596893848] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:28:58,829 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:28:58,829 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-12 02:28:58,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2120146048] [2023-11-12 02:28:58,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:28:58,830 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-12 02:28:58,830 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:28:58,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-12 02:28:58,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-12 02:28:58,832 INFO L87 Difference]: Start difference. First operand 69 states and 86 transitions. Second operand has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:28:59,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:28:59,538 INFO L93 Difference]: Finished difference Result 277 states and 361 transitions. [2023-11-12 02:28:59,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-12 02:28:59,540 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-12 02:28:59,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:28:59,547 INFO L225 Difference]: With dead ends: 277 [2023-11-12 02:28:59,551 INFO L226 Difference]: Without dead ends: 215 [2023-11-12 02:28:59,555 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2023-11-12 02:28:59,562 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 249 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 291 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 364 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-12 02:28:59,563 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [253 Valid, 406 Invalid, 364 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 291 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-12 02:28:59,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2023-11-12 02:28:59,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 180. [2023-11-12 02:28:59,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 130 states have (on average 1.2923076923076924) internal successors, (168), 148 states have internal predecessors, (168), 29 states have call successors, (29), 20 states have call predecessors, (29), 20 states have return successors, (32), 17 states have call predecessors, (32), 29 states have call successors, (32) [2023-11-12 02:28:59,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 229 transitions. [2023-11-12 02:28:59,637 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 229 transitions. Word has length 35 [2023-11-12 02:28:59,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:28:59,637 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 229 transitions. [2023-11-12 02:28:59,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:28:59,638 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 229 transitions. [2023-11-12 02:28:59,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-12 02:28:59,642 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:28:59,642 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:28:59,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-12 02:28:59,642 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:28:59,643 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:28:59,643 INFO L85 PathProgramCache]: Analyzing trace with hash 1911530027, now seen corresponding path program 1 times [2023-11-12 02:28:59,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:28:59,647 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843335478] [2023-11-12 02:28:59,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:28:59,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:28:59,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:59,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:28:59,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:59,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:28:59,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:28:59,758 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:28:59,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:28:59,759 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843335478] [2023-11-12 02:28:59,759 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843335478] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:28:59,759 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:28:59,760 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-12 02:28:59,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1305675649] [2023-11-12 02:28:59,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:28:59,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-12 02:28:59,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:28:59,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-12 02:28:59,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-12 02:28:59,762 INFO L87 Difference]: Start difference. First operand 180 states and 229 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:28:59,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:28:59,926 INFO L93 Difference]: Finished difference Result 487 states and 635 transitions. [2023-11-12 02:28:59,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:28:59,927 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2023-11-12 02:28:59,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:28:59,934 INFO L225 Difference]: With dead ends: 487 [2023-11-12 02:28:59,935 INFO L226 Difference]: Without dead ends: 314 [2023-11-12 02:28:59,936 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:28:59,940 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 99 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-12 02:28:59,941 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 189 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-12 02:28:59,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2023-11-12 02:28:59,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 303. [2023-11-12 02:28:59,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 226 states have (on average 1.2566371681415929) internal successors, (284), 243 states have internal predecessors, (284), 37 states have call successors, (37), 34 states have call predecessors, (37), 39 states have return successors, (62), 36 states have call predecessors, (62), 37 states have call successors, (62) [2023-11-12 02:29:00,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 383 transitions. [2023-11-12 02:29:00,004 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 383 transitions. Word has length 37 [2023-11-12 02:29:00,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:29:00,005 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 383 transitions. [2023-11-12 02:29:00,005 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-12 02:29:00,005 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 383 transitions. [2023-11-12 02:29:00,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-12 02:29:00,014 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:29:00,015 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:29:00,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-12 02:29:00,018 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:29:00,020 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:29:00,020 INFO L85 PathProgramCache]: Analyzing trace with hash 1106967663, now seen corresponding path program 1 times [2023-11-12 02:29:00,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:29:00,021 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313536163] [2023-11-12 02:29:00,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:29:00,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:29:00,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:00,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:29:00,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:00,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-12 02:29:00,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:00,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-12 02:29:00,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:00,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:29:00,265 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:29:00,265 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313536163] [2023-11-12 02:29:00,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313536163] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:29:00,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:29:00,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-12 02:29:00,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1846060752] [2023-11-12 02:29:00,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:29:00,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-12 02:29:00,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:29:00,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-12 02:29:00,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2023-11-12 02:29:00,268 INFO L87 Difference]: Start difference. First operand 303 states and 383 transitions. Second operand has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-12 02:29:01,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:29:01,010 INFO L93 Difference]: Finished difference Result 990 states and 1259 transitions. [2023-11-12 02:29:01,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2023-11-12 02:29:01,011 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2023-11-12 02:29:01,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:29:01,017 INFO L225 Difference]: With dead ends: 990 [2023-11-12 02:29:01,017 INFO L226 Difference]: Without dead ends: 694 [2023-11-12 02:29:01,019 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 144 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=151, Invalid=551, Unknown=0, NotChecked=0, Total=702 [2023-11-12 02:29:01,020 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 286 mSDsluCounter, 323 mSDsCounter, 0 mSdLazyCounter, 356 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 356 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-12 02:29:01,021 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 381 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 356 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-12 02:29:01,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 694 states. [2023-11-12 02:29:01,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 694 to 653. [2023-11-12 02:29:01,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 653 states, 490 states have (on average 1.236734693877551) internal successors, (606), 527 states have internal predecessors, (606), 76 states have call successors, (76), 68 states have call predecessors, (76), 86 states have return successors, (142), 78 states have call predecessors, (142), 76 states have call successors, (142) [2023-11-12 02:29:01,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 653 states to 653 states and 824 transitions. [2023-11-12 02:29:01,098 INFO L78 Accepts]: Start accepts. Automaton has 653 states and 824 transitions. Word has length 44 [2023-11-12 02:29:01,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:29:01,099 INFO L495 AbstractCegarLoop]: Abstraction has 653 states and 824 transitions. [2023-11-12 02:29:01,099 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-12 02:29:01,099 INFO L276 IsEmpty]: Start isEmpty. Operand 653 states and 824 transitions. [2023-11-12 02:29:01,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-12 02:29:01,101 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:29:01,102 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:29:01,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-12 02:29:01,102 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:29:01,103 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:29:01,103 INFO L85 PathProgramCache]: Analyzing trace with hash -519855667, now seen corresponding path program 1 times [2023-11-12 02:29:01,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:29:01,103 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668777217] [2023-11-12 02:29:01,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:29:01,104 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:29:01,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:01,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-12 02:29:01,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:01,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-12 02:29:01,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:01,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-12 02:29:01,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:29:01,213 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:29:01,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:29:01,213 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668777217] [2023-11-12 02:29:01,213 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668777217] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:29:01,213 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:29:01,214 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:29:01,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800094809] [2023-11-12 02:29:01,214 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:29:01,215 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-12 02:29:01,215 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:29:01,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-12 02:29:01,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:29:01,216 INFO L87 Difference]: Start difference. First operand 653 states and 824 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-12 02:29:01,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:29:01,389 INFO L93 Difference]: Finished difference Result 881 states and 1142 transitions. [2023-11-12 02:29:01,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-12 02:29:01,389 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2023-11-12 02:29:01,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:29:01,390 INFO L225 Difference]: With dead ends: 881 [2023-11-12 02:29:01,390 INFO L226 Difference]: Without dead ends: 0 [2023-11-12 02:29:01,393 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2023-11-12 02:29:01,394 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 88 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-12 02:29:01,395 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 112 Invalid, 124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-12 02:29:01,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-12 02:29:01,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-12 02:29:01,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-12 02:29:01,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-12 02:29:01,397 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 44 [2023-11-12 02:29:01,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:29:01,397 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-12 02:29:01,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-12 02:29:01,398 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-12 02:29:01,398 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-12 02:29:01,401 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-12 02:29:01,401 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-12 02:29:01,404 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-12 02:29:01,974 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 290 297) no Hoare annotation was computed. [2023-11-12 02:29:01,975 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 290 297) the Hoare annotation is: true [2023-11-12 02:29:01,975 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 290 297) no Hoare annotation was computed. [2023-11-12 02:29:01,975 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 206 212) no Hoare annotation was computed. [2023-11-12 02:29:01,975 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 206 212) the Hoare annotation is: true [2023-11-12 02:29:01,975 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 817 846) no Hoare annotation was computed. [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2023-11-12 02:29:01,976 INFO L902 garLoopResultBuilder]: At program point L831-1(lines 831 835) the Hoare annotation is: true [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point L828(line 828) no Hoare annotation was computed. [2023-11-12 02:29:01,976 INFO L902 garLoopResultBuilder]: At program point L827-2(lines 827 841) the Hoare annotation is: true [2023-11-12 02:29:01,976 INFO L902 garLoopResultBuilder]: At program point L823(line 823) the Hoare annotation is: true [2023-11-12 02:29:01,976 INFO L899 garLoopResultBuilder]: For program point L823-1(line 823) no Hoare annotation was computed. [2023-11-12 02:29:01,977 INFO L899 garLoopResultBuilder]: For program point L842(lines 817 846) no Hoare annotation was computed. [2023-11-12 02:29:01,977 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 817 846) the Hoare annotation is: true [2023-11-12 02:29:01,977 INFO L899 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2023-11-12 02:29:01,977 INFO L895 garLoopResultBuilder]: At program point L254(line 254) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,977 INFO L895 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,977 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,977 INFO L899 garLoopResultBuilder]: For program point L246-1(line 246) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 182 205) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L259-1(lines 240 264) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L193-1(lines 193 199) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L160(lines 160 166) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 169) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L156-1(lines 148 172) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 127 135) no Hoare annotation was computed. [2023-11-12 02:29:01,978 INFO L899 garLoopResultBuilder]: For program point L954(line 954) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 185 204) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 256) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 261) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 950 957) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 182 205) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-12 02:29:01,979 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 182 205) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 309 317) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 954) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L895 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 373 380) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point L444(lines 383 448) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point L403(lines 403 409) no Hoare annotation was computed. [2023-11-12 02:29:01,980 INFO L899 garLoopResultBuilder]: For program point L403-1(lines 403 409) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 878 887) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point L395(lines 395 399) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 926 932) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 891 913) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L895 garLoopResultBuilder]: At program point L441(lines 392 442) the Hoare annotation is: false [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 871 877) no Hoare annotation was computed. [2023-11-12 02:29:01,981 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point L413(lines 413 419) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point L413-1(lines 413 419) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L895 garLoopResultBuilder]: At program point L438(lines 393 440) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-12 02:29:01,982 INFO L895 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 933 939) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 908) no Hoare annotation was computed. [2023-11-12 02:29:01,982 INFO L899 garLoopResultBuilder]: For program point L901-2(lines 901 908) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 435) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L895 garLoopResultBuilder]: At program point L431-2(lines 423 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 940 948) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point L394(lines 393 440) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 436) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-12 02:29:01,983 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,984 INFO L899 garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 136 144) no Hoare annotation was computed. [2023-11-12 02:29:01,984 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 214 238) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,984 INFO L895 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,984 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,984 INFO L899 garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 354 372) no Hoare annotation was computed. [2023-11-12 02:29:01,984 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 230) no Hoare annotation was computed. [2023-11-12 02:29:01,984 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 235) no Hoare annotation was computed. [2023-11-12 02:29:01,984 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 214 238) no Hoare annotation was computed. [2023-11-12 02:29:01,985 INFO L899 garLoopResultBuilder]: For program point L363(lines 363 367) no Hoare annotation was computed. [2023-11-12 02:29:01,985 INFO L899 garLoopResultBuilder]: For program point L363-2(lines 363 367) no Hoare annotation was computed. [2023-11-12 02:29:01,985 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-12 02:29:01,985 INFO L899 garLoopResultBuilder]: For program point L233-1(lines 214 238) no Hoare annotation was computed. [2023-11-12 02:29:01,987 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCritical_returnLabel#1(lines 95 103) no Hoare annotation was computed. [2023-11-12 02:29:01,987 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 298 308) no Hoare annotation was computed. [2023-11-12 02:29:01,987 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 298 308) the Hoare annotation is: true [2023-11-12 02:29:01,988 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 298 308) no Hoare annotation was computed. [2023-11-12 02:29:01,990 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:29:01,993 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2023-11-12 02:29:02,005 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.11 02:29:02 BoogieIcfgContainer [2023-11-12 02:29:02,006 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-12 02:29:02,006 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-12 02:29:02,006 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-12 02:29:02,007 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-12 02:29:02,007 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:28:57" (3/4) ... [2023-11-12 02:29:02,010 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-12 02:29:02,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-12 02:29:02,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-12 02:29:02,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-12 02:29:02,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-12 02:29:02,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-12 02:29:02,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-12 02:29:02,016 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-12 02:29:02,016 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-12 02:29:02,023 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-12 02:29:02,024 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-12 02:29:02,024 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-12 02:29:02,025 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:29:02,026 INFO L944 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-12 02:29:02,056 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-12 02:29:02,086 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-12 02:29:02,139 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/witness.graphml [2023-11-12 02:29:02,140 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/witness.yml [2023-11-12 02:29:02,140 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-12 02:29:02,141 INFO L158 Benchmark]: Toolchain (without parser) took 6094.30ms. Allocated memory was 134.2MB in the beginning and 232.8MB in the end (delta: 98.6MB). Free memory was 67.1MB in the beginning and 81.1MB in the end (delta: -14.0MB). Peak memory consumption was 87.4MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,141 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 134.2MB. Free memory was 108.2MB in the beginning and 108.1MB in the end (delta: 139.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-12 02:29:02,142 INFO L158 Benchmark]: CACSL2BoogieTranslator took 590.19ms. Allocated memory was 134.2MB in the beginning and 192.9MB in the end (delta: 58.7MB). Free memory was 66.9MB in the beginning and 146.0MB in the end (delta: -79.1MB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,142 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.90ms. Allocated memory is still 192.9MB. Free memory was 146.0MB in the beginning and 143.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,142 INFO L158 Benchmark]: Boogie Preprocessor took 38.81ms. Allocated memory is still 192.9MB. Free memory was 143.9MB in the beginning and 141.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,143 INFO L158 Benchmark]: RCFGBuilder took 670.54ms. Allocated memory is still 192.9MB. Free memory was 141.8MB in the beginning and 160.6MB in the end (delta: -18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,143 INFO L158 Benchmark]: TraceAbstraction took 4584.63ms. Allocated memory was 192.9MB in the beginning and 232.8MB in the end (delta: 39.8MB). Free memory was 160.6MB in the beginning and 88.4MB in the end (delta: 72.1MB). Peak memory consumption was 111.1MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,144 INFO L158 Benchmark]: Witness Printer took 133.60ms. Allocated memory is still 232.8MB. Free memory was 88.4MB in the beginning and 81.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-12 02:29:02,146 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 134.2MB. Free memory was 108.2MB in the beginning and 108.1MB in the end (delta: 139.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 590.19ms. Allocated memory was 134.2MB in the beginning and 192.9MB in the end (delta: 58.7MB). Free memory was 66.9MB in the beginning and 146.0MB in the end (delta: -79.1MB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.90ms. Allocated memory is still 192.9MB. Free memory was 146.0MB in the beginning and 143.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.81ms. Allocated memory is still 192.9MB. Free memory was 143.9MB in the beginning and 141.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 670.54ms. Allocated memory is still 192.9MB. Free memory was 141.8MB in the beginning and 160.6MB in the end (delta: -18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 4584.63ms. Allocated memory was 192.9MB in the beginning and 232.8MB in the end (delta: 39.8MB). Free memory was 160.6MB in the beginning and 88.4MB in the end (delta: 72.1MB). Peak memory consumption was 111.1MB. Max. memory is 16.1GB. * Witness Printer took 133.60ms. Allocated memory is still 232.8MB. Free memory was 88.4MB in the beginning and 81.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 145]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] - GenericResultAtLocation [Line: 173]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] - GenericResultAtLocation [Line: 449]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] - GenericResultAtLocation [Line: 815]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] - GenericResultAtLocation [Line: 914]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] - GenericResultAtLocation [Line: 949]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 954]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.4s, OverallIterations: 7, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 863 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 847 mSDsluCounter, 1559 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1051 mSDsCounter, 233 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 830 IncrementalHoareTripleChecker+Invalid, 1063 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 233 mSolverCounterUnsat, 508 mSDtfsCounter, 830 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 100 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 223 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=653occurred in iteration=6, InterpolantAutomatonStates: 65, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 87 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 480 PreInvPairs, 508 NumberOfFragments, 190 HoareAnnotationTreeSize, 480 FomulaSimplifications, 154 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 23 FomulaSimplificationsInter, 1814 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 224 NumberOfCodeBlocks, 224 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 217 ConstructedInterpolants, 0 QuantifiedInterpolants, 410 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 393]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-11-12 02:29:02,177 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c7da4395-f5c6-4727-8466-1b7d7f6b0680/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE