./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9bd2c7ff Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-9bd2c7f [2023-11-19 07:36:50,002 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-19 07:36:50,077 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-19 07:36:50,083 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-19 07:36:50,084 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-19 07:36:50,111 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-19 07:36:50,111 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-19 07:36:50,112 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-19 07:36:50,113 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-19 07:36:50,113 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-19 07:36:50,114 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-19 07:36:50,115 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-19 07:36:50,115 INFO L153 SettingsManager]: * Use SBE=true [2023-11-19 07:36:50,116 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-19 07:36:50,117 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-19 07:36:50,117 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-19 07:36:50,118 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-19 07:36:50,118 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-19 07:36:50,119 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-19 07:36:50,119 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-19 07:36:50,120 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-19 07:36:50,127 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-19 07:36:50,127 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-19 07:36:50,128 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-19 07:36:50,128 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-19 07:36:50,129 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-19 07:36:50,129 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-19 07:36:50,131 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-19 07:36:50,131 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:36:50,132 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-19 07:36:50,133 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-19 07:36:50,134 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-19 07:36:50,134 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-19 07:36:50,135 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-19 07:36:50,135 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-19 07:36:50,135 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-19 07:36:50,135 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-19 07:36:50,136 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-19 07:36:50,136 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-19 07:36:50,136 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 [2023-11-19 07:36:50,476 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-19 07:36:50,509 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-19 07:36:50,512 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-19 07:36:50,513 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-19 07:36:50,514 INFO L274 PluginConnector]: CDTParser initialized [2023-11-19 07:36:50,516 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-19 07:36:53,784 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-19 07:36:54,062 INFO L384 CDTParser]: Found 1 translation units. [2023-11-19 07:36:54,063 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-19 07:36:54,077 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/data/e7eeab553/0b6179b689fe4ce7ad216a132e7da193/FLAG745fc87b7 [2023-11-19 07:36:54,092 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/data/e7eeab553/0b6179b689fe4ce7ad216a132e7da193 [2023-11-19 07:36:54,095 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-19 07:36:54,097 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-19 07:36:54,098 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-19 07:36:54,098 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-19 07:36:54,104 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-19 07:36:54,105 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,106 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@46a8eb24 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54, skipping insertion in model container [2023-11-19 07:36:54,106 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,177 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-19 07:36:54,533 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-19 07:36:54,566 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:36:54,584 INFO L202 MainTranslator]: Completed pre-run [2023-11-19 07:36:54,596 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-19 07:36:54,597 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] [2023-11-19 07:36:54,598 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-11-19 07:36:54,598 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] [2023-11-19 07:36:54,598 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] [2023-11-19 07:36:54,599 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] [2023-11-19 07:36:54,599 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] [2023-11-19 07:36:54,599 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] [2023-11-19 07:36:54,682 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-19 07:36:54,690 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-19 07:36:54,710 INFO L206 MainTranslator]: Completed translation [2023-11-19 07:36:54,710 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54 WrapperNode [2023-11-19 07:36:54,711 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-19 07:36:54,712 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-19 07:36:54,712 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-19 07:36:54,712 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-19 07:36:54,720 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,735 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,760 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 166 [2023-11-19 07:36:54,761 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-19 07:36:54,761 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-19 07:36:54,762 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-19 07:36:54,762 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-19 07:36:54,771 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,771 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,774 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,774 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,779 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,783 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,785 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,787 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,790 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-19 07:36:54,791 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-19 07:36:54,791 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-19 07:36:54,791 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-19 07:36:54,792 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (1/1) ... [2023-11-19 07:36:54,798 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-19 07:36:54,813 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:36:54,826 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-19 07:36:54,888 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-19 07:36:54,919 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-19 07:36:54,919 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-19 07:36:54,920 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-19 07:36:54,920 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-19 07:36:54,922 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-19 07:36:54,923 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-19 07:36:54,923 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-19 07:36:54,923 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:36:54,923 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:36:54,923 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-19 07:36:54,924 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-19 07:36:54,924 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-19 07:36:54,924 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-19 07:36:54,924 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-19 07:36:54,924 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-19 07:36:54,925 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-19 07:36:54,926 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-19 07:36:54,926 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-19 07:36:55,039 INFO L236 CfgBuilder]: Building ICFG [2023-11-19 07:36:55,042 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-19 07:36:55,285 INFO L277 CfgBuilder]: Performing block encoding [2023-11-19 07:36:55,341 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-19 07:36:55,341 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-19 07:36:55,345 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:36:55 BoogieIcfgContainer [2023-11-19 07:36:55,345 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-19 07:36:55,357 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-19 07:36:55,357 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-19 07:36:55,363 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-19 07:36:55,364 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:36:54" (1/3) ... [2023-11-19 07:36:55,365 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5b491a91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:36:55, skipping insertion in model container [2023-11-19 07:36:55,366 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:36:54" (2/3) ... [2023-11-19 07:36:55,366 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5b491a91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:36:55, skipping insertion in model container [2023-11-19 07:36:55,367 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:36:55" (3/3) ... [2023-11-19 07:36:55,368 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product16.cil.c [2023-11-19 07:36:55,427 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-19 07:36:55,427 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-19 07:36:55,501 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-19 07:36:55,509 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@11e22a9b, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-19 07:36:55,509 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-19 07:36:55,514 INFO L276 IsEmpty]: Start isEmpty. Operand has 79 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-19 07:36:55,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-19 07:36:55,525 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:55,526 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:55,526 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:55,533 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:55,534 INFO L85 PathProgramCache]: Analyzing trace with hash 1968968141, now seen corresponding path program 1 times [2023-11-19 07:36:55,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:55,544 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119047718] [2023-11-19 07:36:55,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:55,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:55,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:55,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:55,780 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:55,780 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119047718] [2023-11-19 07:36:55,781 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119047718] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:55,781 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:55,781 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 07:36:55,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2087391882] [2023-11-19 07:36:55,784 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:55,788 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-19 07:36:55,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:55,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-19 07:36:55,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:36:55,821 INFO L87 Difference]: Start difference. First operand has 79 states, 59 states have (on average 1.3728813559322033) internal successors, (81), 66 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:55,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:55,855 INFO L93 Difference]: Finished difference Result 150 states and 201 transitions. [2023-11-19 07:36:55,856 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-19 07:36:55,858 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-19 07:36:55,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:55,867 INFO L225 Difference]: With dead ends: 150 [2023-11-19 07:36:55,868 INFO L226 Difference]: Without dead ends: 70 [2023-11-19 07:36:55,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-19 07:36:55,876 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:55,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:36:55,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2023-11-19 07:36:55,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2023-11-19 07:36:55,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 52 states have (on average 1.2884615384615385) internal successors, (67), 58 states have internal predecessors, (67), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-19 07:36:55,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 88 transitions. [2023-11-19 07:36:55,924 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 88 transitions. Word has length 19 [2023-11-19 07:36:55,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:55,925 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 88 transitions. [2023-11-19 07:36:55,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:55,926 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 88 transitions. [2023-11-19 07:36:55,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-19 07:36:55,928 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:55,928 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:55,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-19 07:36:55,929 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:55,930 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:55,930 INFO L85 PathProgramCache]: Analyzing trace with hash 676286126, now seen corresponding path program 1 times [2023-11-19 07:36:55,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:55,931 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1670198590] [2023-11-19 07:36:55,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:55,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:55,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:56,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:56,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:56,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1670198590] [2023-11-19 07:36:56,117 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1670198590] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:56,117 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:56,117 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 07:36:56,118 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591960454] [2023-11-19 07:36:56,118 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:56,119 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 07:36:56,119 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:56,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 07:36:56,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,121 INFO L87 Difference]: Start difference. First operand 70 states and 88 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:56,136 INFO L93 Difference]: Finished difference Result 101 states and 125 transitions. [2023-11-19 07:36:56,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 07:36:56,137 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-19 07:36:56,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:56,139 INFO L225 Difference]: With dead ends: 101 [2023-11-19 07:36:56,139 INFO L226 Difference]: Without dead ends: 61 [2023-11-19 07:36:56,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,142 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 17 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:56,143 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 128 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:36:56,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-19 07:36:56,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-19 07:36:56,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 46 states have (on average 1.3043478260869565) internal successors, (60), 52 states have internal predecessors, (60), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-19 07:36:56,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2023-11-19 07:36:56,160 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 20 [2023-11-19 07:36:56,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:56,161 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2023-11-19 07:36:56,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,162 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2023-11-19 07:36:56,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-19 07:36:56,166 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:56,166 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:56,167 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-19 07:36:56,167 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:56,168 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:56,168 INFO L85 PathProgramCache]: Analyzing trace with hash 1105447611, now seen corresponding path program 1 times [2023-11-19 07:36:56,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:56,169 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155667781] [2023-11-19 07:36:56,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:56,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:56,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:56,263 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:56,263 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:56,263 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155667781] [2023-11-19 07:36:56,264 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155667781] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:56,264 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:56,264 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-19 07:36:56,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551864769] [2023-11-19 07:36:56,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:56,265 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 07:36:56,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:56,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 07:36:56,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,267 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:56,301 INFO L93 Difference]: Finished difference Result 167 states and 213 transitions. [2023-11-19 07:36:56,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 07:36:56,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-19 07:36:56,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:56,305 INFO L225 Difference]: With dead ends: 167 [2023-11-19 07:36:56,305 INFO L226 Difference]: Without dead ends: 113 [2023-11-19 07:36:56,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,307 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 68 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:56,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 151 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:36:56,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2023-11-19 07:36:56,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 110. [2023-11-19 07:36:56,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 81 states have (on average 1.3333333333333333) internal successors, (108), 92 states have internal predecessors, (108), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-19 07:36:56,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 140 transitions. [2023-11-19 07:36:56,333 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 140 transitions. Word has length 25 [2023-11-19 07:36:56,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:56,334 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 140 transitions. [2023-11-19 07:36:56,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,334 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 140 transitions. [2023-11-19 07:36:56,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-19 07:36:56,336 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:56,336 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:56,336 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-19 07:36:56,336 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:56,337 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:56,337 INFO L85 PathProgramCache]: Analyzing trace with hash -698168017, now seen corresponding path program 1 times [2023-11-19 07:36:56,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:56,338 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590336016] [2023-11-19 07:36:56,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:56,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:56,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:56,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:56,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:56,569 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590336016] [2023-11-19 07:36:56,569 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590336016] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:56,569 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:56,571 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-19 07:36:56,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127251187] [2023-11-19 07:36:56,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:56,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-19 07:36:56,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:56,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-19 07:36:56,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-19 07:36:56,574 INFO L87 Difference]: Start difference. First operand 110 states and 140 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:56,685 INFO L93 Difference]: Finished difference Result 304 states and 401 transitions. [2023-11-19 07:36:56,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-19 07:36:56,686 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-11-19 07:36:56,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:56,691 INFO L225 Difference]: With dead ends: 304 [2023-11-19 07:36:56,691 INFO L226 Difference]: Without dead ends: 201 [2023-11-19 07:36:56,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-19 07:36:56,695 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 46 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:56,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 276 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:36:56,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2023-11-19 07:36:56,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 201. [2023-11-19 07:36:56,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 146 states have (on average 1.3150684931506849) internal successors, (192), 165 states have internal predecessors, (192), 32 states have call successors, (32), 24 states have call predecessors, (32), 22 states have return successors, (34), 20 states have call predecessors, (34), 32 states have call successors, (34) [2023-11-19 07:36:56,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 258 transitions. [2023-11-19 07:36:56,737 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 258 transitions. Word has length 28 [2023-11-19 07:36:56,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:56,738 INFO L495 AbstractCegarLoop]: Abstraction has 201 states and 258 transitions. [2023-11-19 07:36:56,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,738 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 258 transitions. [2023-11-19 07:36:56,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-19 07:36:56,741 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:56,741 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:56,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-19 07:36:56,742 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:56,742 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:56,742 INFO L85 PathProgramCache]: Analyzing trace with hash 344714708, now seen corresponding path program 1 times [2023-11-19 07:36:56,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:56,743 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56059064] [2023-11-19 07:36:56,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:56,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:56,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:56,815 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:56,815 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:56,816 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56059064] [2023-11-19 07:36:56,816 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56059064] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:56,816 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:56,816 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-19 07:36:56,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1023186855] [2023-11-19 07:36:56,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:56,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-19 07:36:56,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:56,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-19 07:36:56,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,818 INFO L87 Difference]: Start difference. First operand 201 states and 258 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:56,852 INFO L93 Difference]: Finished difference Result 337 states and 441 transitions. [2023-11-19 07:36:56,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-19 07:36:56,852 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-19 07:36:56,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:56,854 INFO L225 Difference]: With dead ends: 337 [2023-11-19 07:36:56,854 INFO L226 Difference]: Without dead ends: 143 [2023-11-19 07:36:56,857 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-19 07:36:56,858 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 50 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:56,859 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 50 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-19 07:36:56,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2023-11-19 07:36:56,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 141. [2023-11-19 07:36:56,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 110 states have (on average 1.2545454545454546) internal successors, (138), 117 states have internal predecessors, (138), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (16), 14 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-19 07:36:56,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 170 transitions. [2023-11-19 07:36:56,878 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 170 transitions. Word has length 30 [2023-11-19 07:36:56,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:56,879 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 170 transitions. [2023-11-19 07:36:56,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:56,879 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 170 transitions. [2023-11-19 07:36:56,881 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-19 07:36:56,881 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:56,881 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:56,881 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-19 07:36:56,882 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:56,882 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:56,882 INFO L85 PathProgramCache]: Analyzing trace with hash -1162418059, now seen corresponding path program 1 times [2023-11-19 07:36:56,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:56,883 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203095681] [2023-11-19 07:36:56,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:56,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:56,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-19 07:36:57,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,114 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:57,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:57,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203095681] [2023-11-19 07:36:57,115 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203095681] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-19 07:36:57,115 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-19 07:36:57,116 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-19 07:36:57,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1563960429] [2023-11-19 07:36:57,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-19 07:36:57,119 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-19 07:36:57,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:57,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-19 07:36:57,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-19 07:36:57,126 INFO L87 Difference]: Start difference. First operand 141 states and 170 transitions. Second operand has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:36:57,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:57,410 INFO L93 Difference]: Finished difference Result 285 states and 349 transitions. [2023-11-19 07:36:57,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-19 07:36:57,411 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-19 07:36:57,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:57,416 INFO L225 Difference]: With dead ends: 285 [2023-11-19 07:36:57,416 INFO L226 Difference]: Without dead ends: 213 [2023-11-19 07:36:57,418 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2023-11-19 07:36:57,428 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 134 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:57,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 246 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:36:57,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2023-11-19 07:36:57,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 207. [2023-11-19 07:36:57,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 160 states have (on average 1.24375) internal successors, (199), 173 states have internal predecessors, (199), 22 states have call successors, (22), 22 states have call predecessors, (22), 24 states have return successors, (24), 22 states have call predecessors, (24), 22 states have call successors, (24) [2023-11-19 07:36:57,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 245 transitions. [2023-11-19 07:36:57,480 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 245 transitions. Word has length 32 [2023-11-19 07:36:57,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:57,482 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 245 transitions. [2023-11-19 07:36:57,482 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.625) internal successors, (29), 6 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-19 07:36:57,482 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 245 transitions. [2023-11-19 07:36:57,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-19 07:36:57,491 INFO L187 NwaCegarLoop]: Found error trace [2023-11-19 07:36:57,491 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:57,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-19 07:36:57,492 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-19 07:36:57,492 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-19 07:36:57,493 INFO L85 PathProgramCache]: Analyzing trace with hash 1801888164, now seen corresponding path program 1 times [2023-11-19 07:36:57,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-19 07:36:57,493 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523580701] [2023-11-19 07:36:57,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:57,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-19 07:36:57,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-19 07:36:57,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-19 07:36:57,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-19 07:36:57,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,739 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-19 07:36:57,739 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-19 07:36:57,739 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523580701] [2023-11-19 07:36:57,740 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523580701] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-19 07:36:57,740 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1455461775] [2023-11-19 07:36:57,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-19 07:36:57,740 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:36:57,740 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 [2023-11-19 07:36:57,742 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-19 07:36:57,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-19 07:36:57,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-19 07:36:57,864 INFO L262 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-19 07:36:57,872 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-19 07:36:58,063 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-19 07:36:58,064 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-19 07:36:58,354 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-19 07:36:58,354 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1455461775] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-19 07:36:58,355 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-19 07:36:58,355 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 15 [2023-11-19 07:36:58,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746461955] [2023-11-19 07:36:58,355 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-19 07:36:58,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-19 07:36:58,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-19 07:36:58,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-19 07:36:58,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2023-11-19 07:36:58,358 INFO L87 Difference]: Start difference. First operand 207 states and 245 transitions. Second operand has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-19 07:36:58,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-19 07:36:58,615 INFO L93 Difference]: Finished difference Result 273 states and 326 transitions. [2023-11-19 07:36:58,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-19 07:36:58,615 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 54 [2023-11-19 07:36:58,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-19 07:36:58,616 INFO L225 Difference]: With dead ends: 273 [2023-11-19 07:36:58,616 INFO L226 Difference]: Without dead ends: 0 [2023-11-19 07:36:58,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 102 SyntacticMatches, 4 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=99, Invalid=281, Unknown=0, NotChecked=0, Total=380 [2023-11-19 07:36:58,625 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 96 mSDsluCounter, 317 mSDsCounter, 0 mSdLazyCounter, 196 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 196 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-19 07:36:58,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 379 Invalid, 223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 196 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-19 07:36:58,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-19 07:36:58,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-19 07:36:58,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-19 07:36:58,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-19 07:36:58,628 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2023-11-19 07:36:58,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-19 07:36:58,628 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-19 07:36:58,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 6.0) internal successors, (90), 12 states have internal predecessors, (90), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-19 07:36:58,629 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-19 07:36:58,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-19 07:36:58,632 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-19 07:36:58,661 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-19 07:36:58,848 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-19 07:36:58,850 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-19 07:36:59,376 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 739 746) no Hoare annotation was computed. [2023-11-19 07:36:59,376 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 746) the Hoare annotation is: true [2023-11-19 07:36:59,376 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 739 746) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 657 680) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point L643(line 643) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 668 674) no Hoare annotation was computed. [2023-11-19 07:36:59,377 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 705) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point getWaterLevel_returnLabel#1(lines 530 538) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 710) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point L466-2(lines 462 473) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point L661-1(lines 660 679) no Hoare annotation was computed. [2023-11-19 07:36:59,378 INFO L899 garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 639 646) no Hoare annotation was computed. [2023-11-19 07:36:59,379 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 657 680) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-19 07:36:59,379 INFO L899 garLoopResultBuilder]: For program point L839(lines 839 845) no Hoare annotation was computed. [2023-11-19 07:36:59,379 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 848) no Hoare annotation was computed. [2023-11-19 07:36:59,379 INFO L899 garLoopResultBuilder]: For program point L835-1(lines 827 851) no Hoare annotation was computed. [2023-11-19 07:36:59,379 INFO L895 garLoopResultBuilder]: At program point L703(line 703) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-19 07:36:59,379 INFO L895 garLoopResultBuilder]: At program point L699(line 699) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-19 07:36:59,380 INFO L895 garLoopResultBuilder]: At program point L695(line 695) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-19 07:36:59,380 INFO L899 garLoopResultBuilder]: For program point L695-1(line 695) no Hoare annotation was computed. [2023-11-19 07:36:59,380 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 657 680) no Hoare annotation was computed. [2023-11-19 07:36:59,380 INFO L899 garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 758 766) no Hoare annotation was computed. [2023-11-19 07:36:59,380 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 643) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L895 garLoopResultBuilder]: At program point L708(line 708) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-19 07:36:59,381 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 689 713) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 542 571) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L899 garLoopResultBuilder]: For program point L567(lines 542 571) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L899 garLoopResultBuilder]: For program point L563(line 563) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 560) no Hoare annotation was computed. [2023-11-19 07:36:59,381 INFO L902 garLoopResultBuilder]: At program point L556-1(lines 556 560) the Hoare annotation is: true [2023-11-19 07:36:59,381 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 542 571) the Hoare annotation is: true [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point L553(line 553) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L902 garLoopResultBuilder]: At program point L552-2(lines 552 566) the Hoare annotation is: true [2023-11-19 07:36:59,382 INFO L902 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: true [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point L865(lines 865 869) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 818 825) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 605 614) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 64 70) no Hoare annotation was computed. [2023-11-19 07:36:59,382 INFO L899 garLoopResultBuilder]: For program point main_returnLabel#1(lines 615 637) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point L916(lines 853 920) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-19 07:36:59,383 INFO L899 garLoopResultBuilder]: For program point setup_returnLabel#1(lines 597 603) no Hoare annotation was computed. [2023-11-19 07:36:59,383 INFO L895 garLoopResultBuilder]: At program point L809(line 809) the Hoare annotation is: false [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-19 07:36:59,384 INFO L895 garLoopResultBuilder]: At program point L913(lines 862 914) the Hoare annotation is: false [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 71 77) no Hoare annotation was computed. [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-19 07:36:59,384 INFO L895 garLoopResultBuilder]: At program point L901-2(lines 893 908) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point L864(lines 863 912) no Hoare annotation was computed. [2023-11-19 07:36:59,384 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 908) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 803 817) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 632) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point L625-2(lines 625 632) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L895 garLoopResultBuilder]: At program point L910(lines 863 912) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 78 86) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-19 07:36:59,385 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 873 879) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L899 garLoopResultBuilder]: For program point L807(lines 807 813) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L899 garLoopResultBuilder]: For program point L807-1(lines 807 813) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-19 07:36:59,386 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 681 687) no Hoare annotation was computed. [2023-11-19 07:36:59,386 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 681 687) the Hoare annotation is: true [2023-11-19 07:36:59,387 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCritical_returnLabel#1(lines 498 506) no Hoare annotation was computed. [2023-11-19 07:36:59,387 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 747 757) no Hoare annotation was computed. [2023-11-19 07:36:59,387 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 747 757) the Hoare annotation is: true [2023-11-19 07:36:59,387 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 747 757) no Hoare annotation was computed. [2023-11-19 07:36:59,389 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-19 07:36:59,392 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-19 07:36:59,404 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:36:59 BoogieIcfgContainer [2023-11-19 07:36:59,404 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-19 07:36:59,404 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-19 07:36:59,404 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-19 07:36:59,405 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-19 07:36:59,405 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:36:55" (3/4) ... [2023-11-19 07:36:59,407 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-19 07:36:59,411 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-19 07:36:59,411 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-19 07:36:59,411 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-19 07:36:59,412 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-19 07:36:59,412 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-19 07:36:59,412 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-19 07:36:59,412 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-19 07:36:59,419 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2023-11-19 07:36:59,419 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-19 07:36:59,420 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-19 07:36:59,420 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:36:59,421 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-19 07:36:59,524 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml [2023-11-19 07:36:59,524 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/witness.yml [2023-11-19 07:36:59,524 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-19 07:36:59,525 INFO L158 Benchmark]: Toolchain (without parser) took 5428.49ms. Allocated memory was 136.3MB in the beginning and 201.3MB in the end (delta: 65.0MB). Free memory was 90.0MB in the beginning and 114.3MB in the end (delta: -24.3MB). Peak memory consumption was 42.3MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,525 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 136.3MB. Free memory was 107.1MB in the beginning and 106.9MB in the end (delta: 167.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 07:36:59,526 INFO L158 Benchmark]: CACSL2BoogieTranslator took 612.96ms. Allocated memory is still 136.3MB. Free memory was 90.0MB in the beginning and 71.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,526 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.18ms. Allocated memory is still 136.3MB. Free memory was 70.7MB in the beginning and 69.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,526 INFO L158 Benchmark]: Boogie Preprocessor took 28.40ms. Allocated memory is still 136.3MB. Free memory was 68.6MB in the beginning and 67.6MB in the end (delta: 980.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-19 07:36:59,527 INFO L158 Benchmark]: RCFGBuilder took 554.78ms. Allocated memory is still 136.3MB. Free memory was 67.5MB in the beginning and 105.6MB in the end (delta: -38.1MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,527 INFO L158 Benchmark]: TraceAbstraction took 4047.26ms. Allocated memory was 136.3MB in the beginning and 201.3MB in the end (delta: 65.0MB). Free memory was 104.8MB in the beginning and 121.6MB in the end (delta: -16.8MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,527 INFO L158 Benchmark]: Witness Printer took 120.00ms. Allocated memory is still 201.3MB. Free memory was 121.6MB in the beginning and 114.3MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-19 07:36:59,529 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 136.3MB. Free memory was 107.1MB in the beginning and 106.9MB in the end (delta: 167.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 612.96ms. Allocated memory is still 136.3MB. Free memory was 90.0MB in the beginning and 71.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.18ms. Allocated memory is still 136.3MB. Free memory was 70.7MB in the beginning and 69.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.40ms. Allocated memory is still 136.3MB. Free memory was 68.6MB in the beginning and 67.6MB in the end (delta: 980.9kB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 554.78ms. Allocated memory is still 136.3MB. Free memory was 67.5MB in the beginning and 105.6MB in the end (delta: -38.1MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. * TraceAbstraction took 4047.26ms. Allocated memory was 136.3MB in the beginning and 201.3MB in the end (delta: 65.0MB). Free memory was 104.8MB in the beginning and 121.6MB in the end (delta: -16.8MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. * Witness Printer took 120.00ms. Allocated memory is still 201.3MB. Free memory was 121.6MB in the beginning and 114.3MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 539]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] - GenericResultAtLocation [Line: 647]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] - GenericResultAtLocation [Line: 826]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] - GenericResultAtLocation [Line: 852]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 643]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 79 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.9s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 402 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 395 mSDsluCounter, 1327 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 843 mSDsCounter, 63 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 321 IncrementalHoareTripleChecker+Invalid, 384 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 63 mSolverCounterUnsat, 484 mSDtfsCounter, 321 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 158 GetRequests, 114 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 83 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=207occurred in iteration=6, InterpolantAutomatonStates: 37, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 7 MinimizatonAttempts, 11 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 212 PreInvPairs, 232 NumberOfFragments, 236 HoareAnnotationTreeSize, 212 FomulaSimplifications, 216 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 655 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 262 NumberOfCodeBlocks, 262 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 307 ConstructedInterpolants, 0 QuantifiedInterpolants, 789 SizeOfPredicates, 0 NumberOfNonLiveVariables, 224 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 51/57 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-19 07:36:59,566 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_16e2cc45-330d-4995-b21c-7d45afd8e628/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE