./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 95fb667c50ce40c1d7afa8c63adccd31fb19279643632f3d92a2ca85ced3f32b --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:04:41,036 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:04:41,150 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:04:41,161 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:04:41,162 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:04:41,203 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:04:41,204 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:04:41,205 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:04:41,206 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:04:41,211 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:04:41,213 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:04:41,213 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:04:41,214 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:04:41,216 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:04:41,216 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:04:41,216 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:04:41,217 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:04:41,217 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:04:41,218 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:04:41,218 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:04:41,219 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:04:41,219 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:04:41,220 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:04:41,220 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:04:41,221 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:04:41,222 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:04:41,222 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:04:41,223 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:04:41,223 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:04:41,224 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:04:41,225 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:04:41,225 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:04:41,226 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:04:41,226 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:04:41,226 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:04:41,226 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:04:41,227 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:04:41,227 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:04:41,227 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:04:41,227 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 95fb667c50ce40c1d7afa8c63adccd31fb19279643632f3d92a2ca85ced3f32b [2023-11-06 23:04:41,499 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:04:41,538 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:04:41,541 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:04:41,543 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:04:41,544 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:04:41,546 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c [2023-11-06 23:04:44,733 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:04:45,054 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:04:45,055 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c [2023-11-06 23:04:45,072 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/data/71f25f2fc/4956847dbdad4e53aa5eb8daacd08918/FLAGa45e05a89 [2023-11-06 23:04:45,095 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/data/71f25f2fc/4956847dbdad4e53aa5eb8daacd08918 [2023-11-06 23:04:45,098 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:04:45,100 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:04:45,102 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:04:45,102 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:04:45,111 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:04:45,112 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,112 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@52f33fd3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45, skipping insertion in model container [2023-11-06 23:04:45,113 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,175 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:04:45,437 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c[3350,3363] [2023-11-06 23:04:45,528 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:04:45,543 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:04:45,555 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-06 23:04:45,557 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] [2023-11-06 23:04:45,558 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] [2023-11-06 23:04:45,558 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [197] [2023-11-06 23:04:45,558 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [281] [2023-11-06 23:04:45,559 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] [2023-11-06 23:04:45,559 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] [2023-11-06 23:04:45,559 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] [2023-11-06 23:04:45,571 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/sv-benchmarks/c/product-lines/minepump_spec4_product07.cil.c[3350,3363] [2023-11-06 23:04:45,625 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:04:45,648 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:04:45,648 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45 WrapperNode [2023-11-06 23:04:45,649 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:04:45,650 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:04:45,650 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:04:45,651 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:04:45,660 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,677 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,725 INFO L138 Inliner]: procedures = 51, calls = 94, calls flagged for inlining = 20, calls inlined = 17, statements flattened = 163 [2023-11-06 23:04:45,726 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:04:45,727 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:04:45,728 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:04:45,728 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:04:45,739 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,740 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,764 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,765 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,770 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,775 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,785 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,795 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,798 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:04:45,799 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:04:45,800 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:04:45,800 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:04:45,801 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (1/1) ... [2023-11-06 23:04:45,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:04:45,822 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:04:45,839 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:04:45,875 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:04:45,890 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:04:45,891 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:04:45,891 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:04:45,891 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:04:45,893 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:04:45,893 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:04:45,893 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:04:45,894 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:04:45,894 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:04:45,894 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 23:04:45,894 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 23:04:45,895 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:04:45,895 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:04:45,895 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:04:45,895 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:04:45,896 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:04:46,022 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:04:46,024 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:04:46,388 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:04:46,397 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:04:46,398 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:04:46,400 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:04:46 BoogieIcfgContainer [2023-11-06 23:04:46,401 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:04:46,425 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:04:46,425 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:04:46,429 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:04:46,430 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:04:45" (1/3) ... [2023-11-06 23:04:46,431 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7d63c461 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:04:46, skipping insertion in model container [2023-11-06 23:04:46,431 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:04:45" (2/3) ... [2023-11-06 23:04:46,436 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7d63c461 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:04:46, skipping insertion in model container [2023-11-06 23:04:46,436 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:04:46" (3/3) ... [2023-11-06 23:04:46,438 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product07.cil.c [2023-11-06 23:04:46,462 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:04:46,462 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:04:46,532 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:04:46,541 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ff0d99f, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:04:46,541 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:04:46,547 INFO L276 IsEmpty]: Start isEmpty. Operand has 74 states, 56 states have (on average 1.3928571428571428) internal successors, (78), 63 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 23:04:46,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 23:04:46,558 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:46,559 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:46,560 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:46,566 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:46,567 INFO L85 PathProgramCache]: Analyzing trace with hash 1246843104, now seen corresponding path program 1 times [2023-11-06 23:04:46,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:46,579 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443901222] [2023-11-06 23:04:46,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:46,580 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:46,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:46,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:46,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:46,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1443901222] [2023-11-06 23:04:46,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1443901222] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:04:46,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:04:46,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:04:46,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088242875] [2023-11-06 23:04:46,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:04:46,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:04:46,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:46,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:04:46,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:04:46,820 INFO L87 Difference]: Start difference. First operand has 74 states, 56 states have (on average 1.3928571428571428) internal successors, (78), 63 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:46,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:46,857 INFO L93 Difference]: Finished difference Result 140 states and 191 transitions. [2023-11-06 23:04:46,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:04:46,859 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 23:04:46,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:46,867 INFO L225 Difference]: With dead ends: 140 [2023-11-06 23:04:46,867 INFO L226 Difference]: Without dead ends: 65 [2023-11-06 23:04:46,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:04:46,876 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:46,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:04:46,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2023-11-06 23:04:46,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65. [2023-11-06 23:04:46,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 49 states have (on average 1.3061224489795917) internal successors, (64), 55 states have internal predecessors, (64), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 23:04:46,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 83 transitions. [2023-11-06 23:04:46,929 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 83 transitions. Word has length 19 [2023-11-06 23:04:46,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:46,930 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 83 transitions. [2023-11-06 23:04:46,930 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:46,930 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 83 transitions. [2023-11-06 23:04:46,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 23:04:46,933 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:46,934 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:46,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:04:46,935 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:46,936 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:46,936 INFO L85 PathProgramCache]: Analyzing trace with hash -1272311586, now seen corresponding path program 1 times [2023-11-06 23:04:46,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:46,937 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199364817] [2023-11-06 23:04:46,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:46,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:46,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:47,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:47,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:47,113 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199364817] [2023-11-06 23:04:47,113 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199364817] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:04:47,114 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:04:47,114 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:04:47,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949825460] [2023-11-06 23:04:47,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:04:47,116 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:04:47,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:47,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:04:47,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:04:47,118 INFO L87 Difference]: Start difference. First operand 65 states and 83 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:47,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:47,152 INFO L93 Difference]: Finished difference Result 92 states and 116 transitions. [2023-11-06 23:04:47,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:04:47,157 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 23:04:47,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:47,159 INFO L225 Difference]: With dead ends: 92 [2023-11-06 23:04:47,161 INFO L226 Difference]: Without dead ends: 56 [2023-11-06 23:04:47,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:04:47,166 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 16 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:47,169 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 119 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:04:47,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-06 23:04:47,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 56. [2023-11-06 23:04:47,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 43 states have (on average 1.3255813953488371) internal successors, (57), 49 states have internal predecessors, (57), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-06 23:04:47,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 71 transitions. [2023-11-06 23:04:47,194 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 71 transitions. Word has length 20 [2023-11-06 23:04:47,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:47,195 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 71 transitions. [2023-11-06 23:04:47,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:47,196 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 71 transitions. [2023-11-06 23:04:47,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 23:04:47,199 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:47,200 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:47,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:04:47,201 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:47,202 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:47,203 INFO L85 PathProgramCache]: Analyzing trace with hash 367213108, now seen corresponding path program 1 times [2023-11-06 23:04:47,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:47,205 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168299685] [2023-11-06 23:04:47,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:47,207 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:47,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:47,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:47,459 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:47,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168299685] [2023-11-06 23:04:47,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168299685] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:04:47,460 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:04:47,460 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:04:47,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1113482538] [2023-11-06 23:04:47,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:04:47,461 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:04:47,461 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:47,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:04:47,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:04:47,463 INFO L87 Difference]: Start difference. First operand 56 states and 71 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:47,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:47,742 INFO L93 Difference]: Finished difference Result 191 states and 250 transitions. [2023-11-06 23:04:47,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:04:47,743 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-06 23:04:47,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:47,747 INFO L225 Difference]: With dead ends: 191 [2023-11-06 23:04:47,747 INFO L226 Difference]: Without dead ends: 142 [2023-11-06 23:04:47,749 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:04:47,751 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 186 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 325 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:47,752 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [186 Valid, 325 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:04:47,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142 states. [2023-11-06 23:04:47,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142 to 136. [2023-11-06 23:04:47,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 103 states have (on average 1.3689320388349515) internal successors, (141), 117 states have internal predecessors, (141), 18 states have call successors, (18), 14 states have call predecessors, (18), 14 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2023-11-06 23:04:47,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 178 transitions. [2023-11-06 23:04:47,791 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 178 transitions. Word has length 24 [2023-11-06 23:04:47,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:47,792 INFO L495 AbstractCegarLoop]: Abstraction has 136 states and 178 transitions. [2023-11-06 23:04:47,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:47,792 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 178 transitions. [2023-11-06 23:04:47,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-06 23:04:47,794 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:47,795 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:47,795 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:04:47,795 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:47,796 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:47,796 INFO L85 PathProgramCache]: Analyzing trace with hash 363472064, now seen corresponding path program 1 times [2023-11-06 23:04:47,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:47,797 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243183755] [2023-11-06 23:04:47,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:47,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:47,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:48,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:04:48,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:48,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:48,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:48,008 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243183755] [2023-11-06 23:04:48,008 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243183755] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:04:48,009 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:04:48,009 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 23:04:48,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489661719] [2023-11-06 23:04:48,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:04:48,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 23:04:48,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:48,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 23:04:48,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:04:48,012 INFO L87 Difference]: Start difference. First operand 136 states and 178 transitions. Second operand has 8 states, 8 states have (on average 3.25) internal successors, (26), 8 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:04:48,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:48,354 INFO L93 Difference]: Finished difference Result 501 states and 693 transitions. [2023-11-06 23:04:48,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 23:04:48,355 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 8 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2023-11-06 23:04:48,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:48,363 INFO L225 Difference]: With dead ends: 501 [2023-11-06 23:04:48,367 INFO L226 Difference]: Without dead ends: 372 [2023-11-06 23:04:48,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=131, Unknown=0, NotChecked=0, Total=182 [2023-11-06 23:04:48,377 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 141 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:48,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 423 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:04:48,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2023-11-06 23:04:48,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 363. [2023-11-06 23:04:48,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 363 states, 272 states have (on average 1.3419117647058822) internal successors, (365), 309 states have internal predecessors, (365), 51 states have call successors, (51), 39 states have call predecessors, (51), 39 states have return successors, (65), 33 states have call predecessors, (65), 51 states have call successors, (65) [2023-11-06 23:04:48,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 481 transitions. [2023-11-06 23:04:48,487 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 481 transitions. Word has length 29 [2023-11-06 23:04:48,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:48,487 INFO L495 AbstractCegarLoop]: Abstraction has 363 states and 481 transitions. [2023-11-06 23:04:48,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 8 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:04:48,488 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 481 transitions. [2023-11-06 23:04:48,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 23:04:48,492 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:48,492 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:48,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:04:48,492 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:48,493 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:48,493 INFO L85 PathProgramCache]: Analyzing trace with hash -1081007141, now seen corresponding path program 1 times [2023-11-06 23:04:48,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:48,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208531926] [2023-11-06 23:04:48,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:48,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:48,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:48,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 23:04:48,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:48,569 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:48,569 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:48,570 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208531926] [2023-11-06 23:04:48,570 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208531926] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:04:48,570 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:04:48,570 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:04:48,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [920413864] [2023-11-06 23:04:48,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:04:48,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:04:48,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:48,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:04:48,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:04:48,573 INFO L87 Difference]: Start difference. First operand 363 states and 481 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:04:48,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:48,643 INFO L93 Difference]: Finished difference Result 638 states and 861 transitions. [2023-11-06 23:04:48,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:04:48,646 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 23:04:48,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:48,653 INFO L225 Difference]: With dead ends: 638 [2023-11-06 23:04:48,653 INFO L226 Difference]: Without dead ends: 282 [2023-11-06 23:04:48,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:04:48,657 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:48,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 49 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:04:48,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2023-11-06 23:04:48,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 276. [2023-11-06 23:04:48,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 215 states have (on average 1.2651162790697674) internal successors, (272), 231 states have internal predecessors, (272), 30 states have call successors, (30), 30 states have call predecessors, (30), 30 states have return successors, (36), 30 states have call predecessors, (36), 30 states have call successors, (36) [2023-11-06 23:04:48,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 338 transitions. [2023-11-06 23:04:48,709 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 338 transitions. Word has length 31 [2023-11-06 23:04:48,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:48,710 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 338 transitions. [2023-11-06 23:04:48,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:04:48,710 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 338 transitions. [2023-11-06 23:04:48,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-06 23:04:48,715 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:04:48,715 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:04:48,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 23:04:48,716 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:04:48,716 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:04:48,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1502780625, now seen corresponding path program 1 times [2023-11-06 23:04:48,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:04:48,717 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605487294] [2023-11-06 23:04:48,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:48,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:04:48,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:49,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:04:49,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:49,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:04:49,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:49,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2023-11-06 23:04:49,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:49,087 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-06 23:04:49,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:04:49,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605487294] [2023-11-06 23:04:49,094 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605487294] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:04:49,094 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1202500066] [2023-11-06 23:04:49,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:04:49,095 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:04:49,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:04:49,099 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:04:49,112 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 23:04:49,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:04:49,244 INFO L262 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 23:04:49,261 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:04:49,519 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:04:49,519 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 23:04:49,914 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:04:49,915 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1202500066] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 23:04:49,915 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 23:04:49,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 15 [2023-11-06 23:04:49,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935259725] [2023-11-06 23:04:49,916 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 23:04:49,917 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-06 23:04:49,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:04:49,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-06 23:04:49,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2023-11-06 23:04:49,919 INFO L87 Difference]: Start difference. First operand 276 states and 338 transitions. Second operand has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 23:04:50,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:04:50,258 INFO L93 Difference]: Finished difference Result 373 states and 455 transitions. [2023-11-06 23:04:50,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:04:50,259 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 53 [2023-11-06 23:04:50,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:04:50,260 INFO L225 Difference]: With dead ends: 373 [2023-11-06 23:04:50,260 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:04:50,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 100 SyntacticMatches, 4 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=99, Invalid=281, Unknown=0, NotChecked=0, Total=380 [2023-11-06 23:04:50,263 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 103 mSDsluCounter, 305 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:04:50,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 365 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:04:50,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:04:50,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:04:50,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:04:50,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:04:50,266 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 53 [2023-11-06 23:04:50,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:04:50,266 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:04:50,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 5.933333333333334) internal successors, (89), 12 states have internal predecessors, (89), 4 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 23:04:50,267 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:04:50,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:04:50,270 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:04:50,283 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 23:04:50,477 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2023-11-06 23:04:50,480 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:04:51,803 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 813 820) no Hoare annotation was computed. [2023-11-06 23:04:51,804 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 813 820) the Hoare annotation is: true [2023-11-06 23:04:51,804 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 813 820) no Hoare annotation was computed. [2023-11-06 23:04:51,804 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 772 778) no Hoare annotation was computed. [2023-11-06 23:04:51,804 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 772 778) the Hoare annotation is: true [2023-11-06 23:04:51,804 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 228 239) the Hoare annotation is: true [2023-11-06 23:04:51,805 INFO L899 garLoopResultBuilder]: For program point L232-1(lines 228 239) no Hoare annotation was computed. [2023-11-06 23:04:51,805 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 228 239) no Hoare annotation was computed. [2023-11-06 23:04:51,805 INFO L895 garLoopResultBuilder]: At program point L799(line 799) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or .cse2 (< |old(~waterLevel~0)| 2) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1)))) [2023-11-06 23:04:51,806 INFO L895 garLoopResultBuilder]: At program point L799-1(lines 780 804) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or .cse2 (< |old(~waterLevel~0)| 2) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1)))) [2023-11-06 23:04:51,806 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 748 771) no Hoare annotation was computed. [2023-11-06 23:04:51,806 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2023-11-06 23:04:51,806 INFO L899 garLoopResultBuilder]: For program point L759-1(lines 759 765) no Hoare annotation was computed. [2023-11-06 23:04:51,807 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 272 280) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_getWaterLevel_#res#1| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 (= ~waterLevel~0 1))))) [2023-11-06 23:04:51,807 INFO L899 garLoopResultBuilder]: For program point L788(lines 788 796) no Hoare annotation was computed. [2023-11-06 23:04:51,807 INFO L899 garLoopResultBuilder]: For program point L784(lines 784 801) no Hoare annotation was computed. [2023-11-06 23:04:51,807 INFO L899 garLoopResultBuilder]: For program point L752-1(lines 751 770) no Hoare annotation was computed. [2023-11-06 23:04:51,807 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 189 196) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,808 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 748 771) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-06 23:04:51,808 INFO L895 garLoopResultBuilder]: At program point L794(line 794) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,808 INFO L895 garLoopResultBuilder]: At program point L790(line 790) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,808 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 212) no Hoare annotation was computed. [2023-11-06 23:04:51,809 INFO L895 garLoopResultBuilder]: At program point L208-2(lines 204 215) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,809 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 240 248) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,809 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 748 771) no Hoare annotation was computed. [2023-11-06 23:04:51,809 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 821 831) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,810 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 832 840) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-06 23:04:51,810 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2023-11-06 23:04:51,810 INFO L899 garLoopResultBuilder]: For program point L295(lines 295 301) no Hoare annotation was computed. [2023-11-06 23:04:51,810 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 304) no Hoare annotation was computed. [2023-11-06 23:04:51,820 INFO L895 garLoopResultBuilder]: At program point L291-1(lines 283 307) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= |timeShift_getWaterLevel_#res#1| 0))) (.cse3 (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (not (= |old(~waterLevel~0)| 1))) (or .cse0 (and .cse1 .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-06 23:04:51,820 INFO L902 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2023-11-06 23:04:51,821 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2023-11-06 23:04:51,821 INFO L899 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2023-11-06 23:04:51,821 INFO L902 garLoopResultBuilder]: At program point L115(lines 90 119) the Hoare annotation is: true [2023-11-06 23:04:51,821 INFO L899 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2023-11-06 23:04:51,821 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 90 119) the Hoare annotation is: true [2023-11-06 23:04:51,821 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2023-11-06 23:04:51,822 INFO L902 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2023-11-06 23:04:51,822 INFO L899 garLoopResultBuilder]: For program point L101(line 101) no Hoare annotation was computed. [2023-11-06 23:04:51,822 INFO L902 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2023-11-06 23:04:51,822 INFO L902 garLoopResultBuilder]: At program point L737(lines 676 741) the Hoare annotation is: true [2023-11-06 23:04:51,822 INFO L899 garLoopResultBuilder]: For program point L696(lines 696 702) no Hoare annotation was computed. [2023-11-06 23:04:51,822 INFO L899 garLoopResultBuilder]: For program point L696-1(lines 696 702) no Hoare annotation was computed. [2023-11-06 23:04:51,822 INFO L899 garLoopResultBuilder]: For program point L688(lines 688 692) no Hoare annotation was computed. [2023-11-06 23:04:51,823 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 155 164) the Hoare annotation is: true [2023-11-06 23:04:51,823 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:04:51,823 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 165 187) the Hoare annotation is: true [2023-11-06 23:04:51,823 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:04:51,823 INFO L895 garLoopResultBuilder]: At program point L734(lines 685 735) the Hoare annotation is: false [2023-11-06 23:04:51,824 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:04:51,824 INFO L895 garLoopResultBuilder]: At program point L883(line 883) the Hoare annotation is: false [2023-11-06 23:04:51,824 INFO L899 garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed. [2023-11-06 23:04:51,824 INFO L895 garLoopResultBuilder]: At program point L722-2(lines 716 729) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 23:04:51,824 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 147 153) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:04:51,824 INFO L899 garLoopResultBuilder]: For program point L706(lines 706 712) no Hoare annotation was computed. [2023-11-06 23:04:51,825 INFO L899 garLoopResultBuilder]: For program point L706-1(lines 706 712) no Hoare annotation was computed. [2023-11-06 23:04:51,825 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:04:51,825 INFO L895 garLoopResultBuilder]: At program point L731(lines 686 733) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 23:04:51,825 INFO L895 garLoopResultBuilder]: At program point L698(line 698) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 23:04:51,825 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:04:51,826 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:04:51,826 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 877 891) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 23:04:51,826 INFO L899 garLoopResultBuilder]: For program point L881(lines 881 887) no Hoare annotation was computed. [2023-11-06 23:04:51,826 INFO L899 garLoopResultBuilder]: For program point L881-1(lines 881 887) no Hoare annotation was computed. [2023-11-06 23:04:51,826 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 182) no Hoare annotation was computed. [2023-11-06 23:04:51,826 INFO L899 garLoopResultBuilder]: For program point L687(lines 686 733) no Hoare annotation was computed. [2023-11-06 23:04:51,828 INFO L899 garLoopResultBuilder]: For program point L175-2(lines 175 182) no Hoare annotation was computed. [2023-11-06 23:04:51,828 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 729) no Hoare annotation was computed. [2023-11-06 23:04:51,828 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:04:51,829 INFO L895 garLoopResultBuilder]: At program point L708(line 708) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 23:04:51,830 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 216 227) no Hoare annotation was computed. [2023-11-06 23:04:51,832 INFO L899 garLoopResultBuilder]: For program point L220-1(lines 216 227) no Hoare annotation was computed. [2023-11-06 23:04:51,833 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 216 227) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-06 23:04:51,836 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2023-11-06 23:04:51,838 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:04:51,872 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:04:51 BoogieIcfgContainer [2023-11-06 23:04:51,872 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:04:51,873 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:04:51,873 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:04:51,873 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:04:51,874 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:04:46" (3/4) ... [2023-11-06 23:04:51,877 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:04:51,882 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 23:04:51,882 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:04:51,882 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:04:51,882 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:04:51,882 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:04:51,883 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:04:51,891 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 23:04:51,892 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:04:51,893 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:04:51,894 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:04:51,894 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:04:51,930 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:04:51,930 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:04:51,930 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) [2023-11-06 23:04:51,931 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))))) [2023-11-06 23:04:51,932 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && !((\result == 0))) && (waterLevel == 1)))) [2023-11-06 23:04:51,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,933 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (waterLevel == 1))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-06 23:04:51,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) [2023-11-06 23:04:51,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,934 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,935 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,967 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:04:51,968 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:04:51,968 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) [2023-11-06 23:04:51,969 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,969 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))))) [2023-11-06 23:04:51,970 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && !((\result == 0))) && (waterLevel == 1)))) [2023-11-06 23:04:51,970 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,970 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (waterLevel == 1))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-06 23:04:51,970 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) [2023-11-06 23:04:51,971 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,971 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,971 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) [2023-11-06 23:04:51,988 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:04:51,988 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:04:51,988 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:04:51,989 INFO L158 Benchmark]: Toolchain (without parser) took 6889.12ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 109.6MB in the beginning and 78.4MB in the end (delta: 31.2MB). Peak memory consumption was 63.4MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,990 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 113.2MB. Free memory is still 64.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:04:51,990 INFO L158 Benchmark]: CACSL2BoogieTranslator took 547.26ms. Allocated memory is still 155.2MB. Free memory was 109.6MB in the beginning and 91.0MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,991 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.43ms. Allocated memory is still 155.2MB. Free memory was 91.0MB in the beginning and 89.0MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,991 INFO L158 Benchmark]: Boogie Preprocessor took 71.06ms. Allocated memory is still 155.2MB. Free memory was 89.0MB in the beginning and 87.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:04:51,991 INFO L158 Benchmark]: RCFGBuilder took 601.48ms. Allocated memory is still 155.2MB. Free memory was 87.4MB in the beginning and 72.6MB in the end (delta: 14.8MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,992 INFO L158 Benchmark]: TraceAbstraction took 5447.01ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 125.1MB in the beginning and 85.7MB in the end (delta: 39.4MB). Peak memory consumption was 92.4MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,992 INFO L158 Benchmark]: Witness Printer took 115.69ms. Allocated memory is still 186.6MB. Free memory was 85.7MB in the beginning and 78.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 23:04:51,995 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 113.2MB. Free memory is still 64.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 547.26ms. Allocated memory is still 155.2MB. Free memory was 109.6MB in the beginning and 91.0MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 76.43ms. Allocated memory is still 155.2MB. Free memory was 91.0MB in the beginning and 89.0MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 71.06ms. Allocated memory is still 155.2MB. Free memory was 89.0MB in the beginning and 87.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 601.48ms. Allocated memory is still 155.2MB. Free memory was 87.4MB in the beginning and 72.6MB in the end (delta: 14.8MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 5447.01ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 125.1MB in the beginning and 85.7MB in the end (delta: 39.4MB). Peak memory consumption was 92.4MB. Max. memory is 16.1GB. * Witness Printer took 115.69ms. Allocated memory is still 186.6MB. Free memory was 85.7MB in the beginning and 78.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] - GenericResultAtLocation [Line: 197]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [197] - GenericResultAtLocation [Line: 281]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [281] - GenericResultAtLocation [Line: 308]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [308] - GenericResultAtLocation [Line: 674]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [674] - GenericResultAtLocation [Line: 742]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [742] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 74 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.3s, OverallIterations: 6, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 487 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 483 mSDsluCounter, 1373 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 963 mSDsCounter, 76 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 380 IncrementalHoareTripleChecker+Invalid, 456 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 76 mSolverCounterUnsat, 410 mSDtfsCounter, 380 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 155 GetRequests, 113 SyntacticMatches, 4 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=363occurred in iteration=4, InterpolantAutomatonStates: 32, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 6 MinimizatonAttempts, 21 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 35 LocationsWithAnnotation, 485 PreInvPairs, 543 NumberOfFragments, 547 HoareAnnotationTreeSize, 485 FomulaSimplifications, 315 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 35 FomulaSimplificationsInter, 1993 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 229 NumberOfCodeBlocks, 229 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 274 ConstructedInterpolants, 0 QuantifiedInterpolants, 726 SizeOfPredicates, 0 NumberOfNonLiveVariables, 219 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 8 InterpolantComputations, 5 PerfectInterpolantSequences, 48/54 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 877]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 90]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((pumpRunning == 0) && !((\result == 0))) && (waterLevel == 1)))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (waterLevel == 1))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && !((\result == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 676]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 1))) && ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive))))) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 2)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1)))) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 23:04:52,037 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ecaec9b3-c466-45e4-8444-cefdbe13b7fe/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE