./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bd7f84863cb412e83f8c5773a09de3282aa45b8f86409f0c880aae27635b0b5f --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:23:46,670 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:23:46,748 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:23:46,754 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:23:46,755 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:23:46,783 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:23:46,784 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:23:46,785 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:23:46,786 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:23:46,786 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:23:46,787 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:23:46,788 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:23:46,788 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:23:46,789 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:23:46,789 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:23:46,790 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:23:46,790 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:23:46,791 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:23:46,791 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:23:46,792 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:23:46,792 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:23:46,793 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:23:46,794 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:23:46,794 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:23:46,795 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:23:46,795 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:23:46,795 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:23:46,796 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:23:46,796 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:23:46,797 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:23:46,797 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:23:46,798 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:23:46,798 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:23:46,799 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:23:46,799 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:23:46,800 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:23:46,800 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:23:46,801 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:23:46,801 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:23:46,801 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bd7f84863cb412e83f8c5773a09de3282aa45b8f86409f0c880aae27635b0b5f [2023-11-06 22:23:47,095 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:23:47,132 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:23:47,135 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:23:47,137 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:23:47,137 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:23:47,139 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c [2023-11-06 22:23:50,380 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:23:50,704 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:23:50,706 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c [2023-11-06 22:23:50,729 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/data/f23c92a6c/1e275488f2fa4643ac8e28928ebbf5f1/FLAG52b48518f [2023-11-06 22:23:50,741 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/data/f23c92a6c/1e275488f2fa4643ac8e28928ebbf5f1 [2023-11-06 22:23:50,744 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:23:50,745 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:23:50,747 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:23:50,747 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:23:50,754 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:23:50,754 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:23:50" (1/1) ... [2023-11-06 22:23:50,755 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25b5466e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:50, skipping insertion in model container [2023-11-06 22:23:50,756 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:23:50" (1/1) ... [2023-11-06 22:23:50,800 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:23:50,959 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c[1605,1618] [2023-11-06 22:23:51,114 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:23:51,141 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:23:51,153 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-06 22:23:51,155 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [58] [2023-11-06 22:23:51,155 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [208] [2023-11-06 22:23:51,156 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [278] [2023-11-06 22:23:51,156 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [305] [2023-11-06 22:23:51,156 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [385] [2023-11-06 22:23:51,157 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [484] [2023-11-06 22:23:51,157 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [850] [2023-11-06 22:23:51,161 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/sv-benchmarks/c/product-lines/minepump_spec4_product11.cil.c[1605,1618] [2023-11-06 22:23:51,217 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:23:51,237 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:23:51,238 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51 WrapperNode [2023-11-06 22:23:51,238 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:23:51,239 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:23:51,240 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:23:51,240 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:23:51,247 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,261 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,288 INFO L138 Inliner]: procedures = 51, calls = 92, calls flagged for inlining = 22, calls inlined = 16, statements flattened = 140 [2023-11-06 22:23:51,288 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:23:51,289 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:23:51,289 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:23:51,290 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:23:51,300 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,300 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,302 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,303 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,314 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,326 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,328 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,329 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,334 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:23:51,335 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:23:51,335 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:23:51,336 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:23:51,337 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (1/1) ... [2023-11-06 22:23:51,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:23:51,365 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:23:51,386 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:23:51,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:23:51,427 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:23:51,427 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:23:51,428 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:23:51,428 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:23:51,431 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:23:51,431 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:23:51,432 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:23:51,432 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:23:51,432 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:23:51,433 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:23:51,433 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:23:51,433 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:23:51,541 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:23:51,544 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:23:51,831 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:23:51,838 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:23:51,839 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:23:51,841 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:23:51 BoogieIcfgContainer [2023-11-06 22:23:51,841 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:23:51,844 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:23:51,845 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:23:51,848 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:23:51,849 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:23:50" (1/3) ... [2023-11-06 22:23:51,850 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62ad864e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:23:51, skipping insertion in model container [2023-11-06 22:23:51,850 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:23:51" (2/3) ... [2023-11-06 22:23:51,850 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@62ad864e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:23:51, skipping insertion in model container [2023-11-06 22:23:51,851 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:23:51" (3/3) ... [2023-11-06 22:23:51,852 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product11.cil.c [2023-11-06 22:23:51,874 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:23:51,874 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:23:51,928 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:23:51,935 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@65441dd1, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:23:51,936 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:23:51,944 INFO L276 IsEmpty]: Start isEmpty. Operand has 62 states, 50 states have (on average 1.4) internal successors, (70), 54 states have internal predecessors, (70), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2023-11-06 22:23:51,955 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:23:51,956 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:51,957 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:51,957 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:51,963 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:51,964 INFO L85 PathProgramCache]: Analyzing trace with hash -192528358, now seen corresponding path program 1 times [2023-11-06 22:23:51,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:51,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184930904] [2023-11-06 22:23:51,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:51,974 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:52,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:52,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:52,171 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:52,172 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184930904] [2023-11-06 22:23:52,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184930904] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:52,173 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:52,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:23:52,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [857061695] [2023-11-06 22:23:52,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:52,181 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:23:52,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:52,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:23:52,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:23:52,239 INFO L87 Difference]: Start difference. First operand has 62 states, 50 states have (on average 1.4) internal successors, (70), 54 states have internal predecessors, (70), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:52,295 INFO L93 Difference]: Finished difference Result 116 states and 159 transitions. [2023-11-06 22:23:52,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:23:52,297 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:23:52,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:52,307 INFO L225 Difference]: With dead ends: 116 [2023-11-06 22:23:52,308 INFO L226 Difference]: Without dead ends: 53 [2023-11-06 22:23:52,313 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:23:52,322 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:52,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:23:52,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-06 22:23:52,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-06 22:23:52,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 43 states have (on average 1.302325581395349) internal successors, (56), 46 states have internal predecessors, (56), 6 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2023-11-06 22:23:52,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 67 transitions. [2023-11-06 22:23:52,387 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 67 transitions. Word has length 19 [2023-11-06 22:23:52,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:52,389 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 67 transitions. [2023-11-06 22:23:52,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,390 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 67 transitions. [2023-11-06 22:23:52,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:23:52,392 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:52,393 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:52,393 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:23:52,394 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:52,395 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:52,396 INFO L85 PathProgramCache]: Analyzing trace with hash 1987482606, now seen corresponding path program 1 times [2023-11-06 22:23:52,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:52,397 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001059785] [2023-11-06 22:23:52,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:52,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:52,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:52,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:52,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:52,701 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001059785] [2023-11-06 22:23:52,701 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001059785] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:52,702 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:52,702 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:23:52,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539221654] [2023-11-06 22:23:52,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:52,705 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:23:52,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:52,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:23:52,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:52,708 INFO L87 Difference]: Start difference. First operand 53 states and 67 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:52,723 INFO L93 Difference]: Finished difference Result 68 states and 85 transitions. [2023-11-06 22:23:52,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:23:52,724 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:23:52,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:52,726 INFO L225 Difference]: With dead ends: 68 [2023-11-06 22:23:52,726 INFO L226 Difference]: Without dead ends: 44 [2023-11-06 22:23:52,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:52,729 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 17 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:52,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 87 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:23:52,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2023-11-06 22:23:52,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 44. [2023-11-06 22:23:52,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 37 states have (on average 1.3243243243243243) internal successors, (49), 40 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:23:52,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 55 transitions. [2023-11-06 22:23:52,739 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 55 transitions. Word has length 20 [2023-11-06 22:23:52,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:52,739 INFO L495 AbstractCegarLoop]: Abstraction has 44 states and 55 transitions. [2023-11-06 22:23:52,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,740 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 55 transitions. [2023-11-06 22:23:52,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:23:52,741 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:52,741 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:52,742 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:23:52,742 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:52,743 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:52,743 INFO L85 PathProgramCache]: Analyzing trace with hash -296029766, now seen corresponding path program 1 times [2023-11-06 22:23:52,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:52,744 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2013068536] [2023-11-06 22:23:52,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:52,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:52,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:52,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:52,871 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:52,872 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2013068536] [2023-11-06 22:23:52,872 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2013068536] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:52,872 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:52,872 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:23:52,873 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2101157655] [2023-11-06 22:23:52,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:52,874 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:23:52,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:52,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:23:52,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:52,875 INFO L87 Difference]: Start difference. First operand 44 states and 55 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:52,914 INFO L93 Difference]: Finished difference Result 117 states and 151 transitions. [2023-11-06 22:23:52,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:23:52,915 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-06 22:23:52,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:52,918 INFO L225 Difference]: With dead ends: 117 [2023-11-06 22:23:52,918 INFO L226 Difference]: Without dead ends: 80 [2023-11-06 22:23:52,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:52,921 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 35 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:52,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 99 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:23:52,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-06 22:23:52,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 75. [2023-11-06 22:23:52,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 62 states have (on average 1.3548387096774193) internal successors, (84), 67 states have internal predecessors, (84), 6 states have call successors, (6), 6 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2023-11-06 22:23:52,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2023-11-06 22:23:52,942 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 24 [2023-11-06 22:23:52,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:52,943 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2023-11-06 22:23:52,943 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:52,944 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2023-11-06 22:23:52,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:23:52,945 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:52,945 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:52,945 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:23:52,946 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:52,946 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:52,946 INFO L85 PathProgramCache]: Analyzing trace with hash 1716566345, now seen corresponding path program 1 times [2023-11-06 22:23:52,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:52,947 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927408589] [2023-11-06 22:23:52,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:52,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:52,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:53,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:53,200 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:53,200 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927408589] [2023-11-06 22:23:53,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927408589] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:53,201 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:53,201 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:23:53,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990980393] [2023-11-06 22:23:53,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:53,202 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:23:53,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:53,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:23:53,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:23:53,204 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:53,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:53,505 INFO L93 Difference]: Finished difference Result 239 states and 322 transitions. [2023-11-06 22:23:53,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:23:53,506 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-06 22:23:53,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:53,512 INFO L225 Difference]: With dead ends: 239 [2023-11-06 22:23:53,516 INFO L226 Difference]: Without dead ends: 171 [2023-11-06 22:23:53,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:23:53,521 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 107 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 256 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:53,524 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 256 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:23:53,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2023-11-06 22:23:53,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 133. [2023-11-06 22:23:53,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 110 states have (on average 1.3454545454545455) internal successors, (148), 119 states have internal predecessors, (148), 10 states have call successors, (10), 10 states have call predecessors, (10), 12 states have return successors, (14), 12 states have call predecessors, (14), 10 states have call successors, (14) [2023-11-06 22:23:53,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 172 transitions. [2023-11-06 22:23:53,567 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 172 transitions. Word has length 25 [2023-11-06 22:23:53,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:53,568 INFO L495 AbstractCegarLoop]: Abstraction has 133 states and 172 transitions. [2023-11-06 22:23:53,568 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:53,568 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 172 transitions. [2023-11-06 22:23:53,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2023-11-06 22:23:53,570 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:53,570 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:53,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:23:53,571 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:53,572 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:53,572 INFO L85 PathProgramCache]: Analyzing trace with hash 1833945412, now seen corresponding path program 1 times [2023-11-06 22:23:53,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:53,573 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [404136538] [2023-11-06 22:23:53,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:53,573 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:53,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:53,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:53,646 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:53,646 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [404136538] [2023-11-06 22:23:53,646 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [404136538] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:53,647 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:53,647 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:23:53,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872148653] [2023-11-06 22:23:53,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:53,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:23:53,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:53,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:23:53,649 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:53,649 INFO L87 Difference]: Start difference. First operand 133 states and 172 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:53,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:53,675 INFO L93 Difference]: Finished difference Result 249 states and 327 transitions. [2023-11-06 22:23:53,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:23:53,676 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2023-11-06 22:23:53,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:53,678 INFO L225 Difference]: With dead ends: 249 [2023-11-06 22:23:53,678 INFO L226 Difference]: Without dead ends: 123 [2023-11-06 22:23:53,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:23:53,681 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:53,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 46 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:23:53,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2023-11-06 22:23:53,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 123. [2023-11-06 22:23:53,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 100 states have (on average 1.28) internal successors, (128), 109 states have internal predecessors, (128), 10 states have call successors, (10), 10 states have call predecessors, (10), 12 states have return successors, (12), 12 states have call predecessors, (12), 10 states have call successors, (12) [2023-11-06 22:23:53,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 150 transitions. [2023-11-06 22:23:53,726 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 150 transitions. Word has length 27 [2023-11-06 22:23:53,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:53,728 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 150 transitions. [2023-11-06 22:23:53,728 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:53,728 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 150 transitions. [2023-11-06 22:23:53,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-06 22:23:53,734 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:53,734 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:53,735 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:23:53,736 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:53,737 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:53,737 INFO L85 PathProgramCache]: Analyzing trace with hash 957939555, now seen corresponding path program 1 times [2023-11-06 22:23:53,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:53,739 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1897278928] [2023-11-06 22:23:53,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:53,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:53,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:53,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:23:53,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,044 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:54,044 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:54,044 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1897278928] [2023-11-06 22:23:54,044 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1897278928] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:23:54,045 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:23:54,045 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:23:54,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [144284708] [2023-11-06 22:23:54,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:23:54,046 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:23:54,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:54,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:23:54,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:23:54,047 INFO L87 Difference]: Start difference. First operand 123 states and 150 transitions. Second operand has 8 states, 8 states have (on average 3.25) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:23:54,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:54,357 INFO L93 Difference]: Finished difference Result 351 states and 441 transitions. [2023-11-06 22:23:54,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-06 22:23:54,364 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2023-11-06 22:23:54,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:54,370 INFO L225 Difference]: With dead ends: 351 [2023-11-06 22:23:54,370 INFO L226 Difference]: Without dead ends: 235 [2023-11-06 22:23:54,374 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:23:54,381 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 125 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:54,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 230 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:23:54,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2023-11-06 22:23:54,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 180. [2023-11-06 22:23:54,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 145 states have (on average 1.2689655172413794) internal successors, (184), 158 states have internal predecessors, (184), 16 states have call successors, (16), 16 states have call predecessors, (16), 18 states have return successors, (18), 16 states have call predecessors, (18), 16 states have call successors, (18) [2023-11-06 22:23:54,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 218 transitions. [2023-11-06 22:23:54,459 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 218 transitions. Word has length 29 [2023-11-06 22:23:54,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:54,460 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 218 transitions. [2023-11-06 22:23:54,460 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 6 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:23:54,460 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 218 transitions. [2023-11-06 22:23:54,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 22:23:54,468 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:23:54,468 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:54,468 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:23:54,470 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:23:54,470 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:23:54,471 INFO L85 PathProgramCache]: Analyzing trace with hash -426576330, now seen corresponding path program 1 times [2023-11-06 22:23:54,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:23:54,473 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [281098503] [2023-11-06 22:23:54,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:54,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:23:54,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:23:54,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:23:54,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 22:23:54,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,634 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2023-11-06 22:23:54,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:23:54,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [281098503] [2023-11-06 22:23:54,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [281098503] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:23:54,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1229749304] [2023-11-06 22:23:54,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:23:54,636 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:23:54,636 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:23:54,642 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:23:54,654 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:23:54,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:23:54,760 INFO L262 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:23:54,771 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:23:54,942 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:23:54,942 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:23:55,245 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:23:55,245 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1229749304] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:23:55,245 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:23:55,246 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 7] total 14 [2023-11-06 22:23:55,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [967269630] [2023-11-06 22:23:55,246 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:23:55,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-11-06 22:23:55,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:23:55,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-11-06 22:23:55,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=140, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:23:55,251 INFO L87 Difference]: Start difference. First operand 180 states and 218 transitions. Second operand has 14 states, 14 states have (on average 6.0) internal successors, (84), 12 states have internal predecessors, (84), 4 states have call successors, (10), 6 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:23:55,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:23:55,425 INFO L93 Difference]: Finished difference Result 237 states and 290 transitions. [2023-11-06 22:23:55,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:23:55,426 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 6.0) internal successors, (84), 12 states have internal predecessors, (84), 4 states have call successors, (10), 6 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 51 [2023-11-06 22:23:55,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:23:55,427 INFO L225 Difference]: With dead ends: 237 [2023-11-06 22:23:55,427 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:23:55,428 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 95 SyntacticMatches, 4 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=91, Invalid=251, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:23:55,429 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 120 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 257 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:23:55,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 257 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:23:55,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:23:55,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:23:55,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:23:55,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:23:55,430 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 51 [2023-11-06 22:23:55,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:23:55,430 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:23:55,431 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 6.0) internal successors, (84), 12 states have internal predecessors, (84), 4 states have call successors, (10), 6 states have call predecessors, (10), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:23:55,431 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:23:55,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:23:55,434 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:23:55,445 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-06 22:23:55,639 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2023-11-06 22:23:55,641 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:23:56,412 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 332 343) no Hoare annotation was computed. [2023-11-06 22:23:56,412 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 332 343) the Hoare annotation is: true [2023-11-06 22:23:56,412 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 332 343) no Hoare annotation was computed. [2023-11-06 22:23:56,412 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 387 416) no Hoare annotation was computed. [2023-11-06 22:23:56,412 INFO L902 garLoopResultBuilder]: At program point L412(lines 387 416) the Hoare annotation is: true [2023-11-06 22:23:56,413 INFO L899 garLoopResultBuilder]: For program point L408(line 408) no Hoare annotation was computed. [2023-11-06 22:23:56,413 INFO L899 garLoopResultBuilder]: For program point L401(lines 401 405) no Hoare annotation was computed. [2023-11-06 22:23:56,413 INFO L902 garLoopResultBuilder]: At program point L401-1(lines 401 405) the Hoare annotation is: true [2023-11-06 22:23:56,413 INFO L899 garLoopResultBuilder]: For program point L398(line 398) no Hoare annotation was computed. [2023-11-06 22:23:56,413 INFO L902 garLoopResultBuilder]: At program point L397-2(lines 397 411) the Hoare annotation is: true [2023-11-06 22:23:56,413 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 387 416) the Hoare annotation is: true [2023-11-06 22:23:56,413 INFO L902 garLoopResultBuilder]: At program point L393(line 393) the Hoare annotation is: true [2023-11-06 22:23:56,414 INFO L899 garLoopResultBuilder]: For program point L393-1(line 393) no Hoare annotation was computed. [2023-11-06 22:23:56,414 INFO L899 garLoopResultBuilder]: For program point L312(lines 312 316) no Hoare annotation was computed. [2023-11-06 22:23:56,414 INFO L895 garLoopResultBuilder]: At program point L312-2(lines 308 319) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2023-11-06 22:23:56,415 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-06 22:23:56,415 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2023-11-06 22:23:56,416 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2023-11-06 22:23:56,417 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 95) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-06 22:23:56,418 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 72 95) no Hoare annotation was computed. [2023-11-06 22:23:56,418 INFO L895 garLoopResultBuilder]: At program point processEnvironment_returnLabel#1(lines 96 102) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-06 22:23:56,418 INFO L899 garLoopResultBuilder]: For program point L292(lines 292 298) no Hoare annotation was computed. [2023-11-06 22:23:56,418 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 301) no Hoare annotation was computed. [2023-11-06 22:23:56,420 INFO L895 garLoopResultBuilder]: At program point L288-1(lines 280 304) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~2#1| 0))) (.cse2 (not (= |timeShift_getWaterLevel_#res#1| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 .cse2 (= ~waterLevel~0 1))) (or .cse0 (< |old(~waterLevel~0)| 2) (and .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0))))) [2023-11-06 22:23:56,421 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 376 384) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse0 (not (= |timeShift_getWaterLevel_#res#1| 0)))) (and (or (and .cse0 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1))) (or .cse1 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-06 22:23:56,421 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 75 94) no Hoare annotation was computed. [2023-11-06 22:23:56,421 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 72 95) no Hoare annotation was computed. [2023-11-06 22:23:56,421 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 148 156) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (< |old(~waterLevel~0)| 2)))) [2023-11-06 22:23:56,422 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-06 22:23:56,422 INFO L895 garLoopResultBuilder]: At program point L258-2(lines 252 265) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 22:23:56,422 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 248) no Hoare annotation was computed. [2023-11-06 22:23:56,422 INFO L899 garLoopResultBuilder]: For program point L242-1(lines 242 248) no Hoare annotation was computed. [2023-11-06 22:23:56,423 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 448 457) the Hoare annotation is: true [2023-11-06 22:23:56,423 INFO L895 garLoopResultBuilder]: At program point L267(lines 222 269) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 22:23:56,423 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 22:23:56,424 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 862 868) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:23:56,424 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 461 483) the Hoare annotation is: true [2023-11-06 22:23:56,424 INFO L899 garLoopResultBuilder]: For program point L197(lines 197 203) no Hoare annotation was computed. [2023-11-06 22:23:56,424 INFO L899 garLoopResultBuilder]: For program point L197-2(lines 197 203) no Hoare annotation was computed. [2023-11-06 22:23:56,424 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:23:56,424 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:23:56,425 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 441 447) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:23:56,425 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:23:56,425 INFO L899 garLoopResultBuilder]: For program point L223(lines 222 269) no Hoare annotation was computed. [2023-11-06 22:23:56,425 INFO L899 garLoopResultBuilder]: For program point L252(lines 252 265) no Hoare annotation was computed. [2023-11-06 22:23:56,426 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 478) no Hoare annotation was computed. [2023-11-06 22:23:56,426 INFO L899 garLoopResultBuilder]: For program point L471-2(lines 471 478) no Hoare annotation was computed. [2023-11-06 22:23:56,426 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 22:23:56,426 INFO L902 garLoopResultBuilder]: At program point L273(lines 212 277) the Hoare annotation is: true [2023-11-06 22:23:56,426 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:23:56,427 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 869 875) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:23:56,427 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 238) no Hoare annotation was computed. [2023-11-06 22:23:56,427 INFO L899 garLoopResultBuilder]: For program point L232-1(lines 232 238) no Hoare annotation was computed. [2023-11-06 22:23:56,427 INFO L899 garLoopResultBuilder]: For program point L224(lines 224 228) no Hoare annotation was computed. [2023-11-06 22:23:56,427 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 129 136) the Hoare annotation is: false [2023-11-06 22:23:56,428 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 193 207) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-06 22:23:56,428 INFO L895 garLoopResultBuilder]: At program point L270(lines 221 271) the Hoare annotation is: false [2023-11-06 22:23:56,428 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 876 884) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:23:56,428 INFO L899 garLoopResultBuilder]: For program point L258(lines 258 264) no Hoare annotation was computed. [2023-11-06 22:23:56,429 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 320 331) no Hoare annotation was computed. [2023-11-06 22:23:56,429 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 320 331) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-06 22:23:56,429 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 320 331) no Hoare annotation was computed. [2023-11-06 22:23:56,435 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:23:56,437 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:23:56,483 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:23:56 BoogieIcfgContainer [2023-11-06 22:23:56,483 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:23:56,483 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:23:56,483 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:23:56,484 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:23:56,484 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:23:51" (3/4) ... [2023-11-06 22:23:56,486 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:23:56,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:23:56,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:23:56,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:23:56,494 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:23:56,505 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 15 nodes and edges [2023-11-06 22:23:56,505 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:23:56,506 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:23:56,506 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:23:56,507 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:23:56,538 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,539 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || (\old(waterLevel) == waterLevel)) && ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || (waterLevel == 1))) [2023-11-06 22:23:56,540 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\result == 0)) && (waterLevel == 1)) || !((pumpRunning == 0))) || !((\old(waterLevel) == 1))) && ((!((pumpRunning == 0)) || (!((\result == 0)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,540 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || ((!((tmp == 0)) && !((\result == 0))) && (waterLevel == 1))) && ((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || ((!((tmp == 0)) && !((\result == 0))) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:23:56,541 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,541 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,579 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,579 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || (\old(waterLevel) == waterLevel)) && ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || (waterLevel == 1))) [2023-11-06 22:23:56,579 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\result == 0)) && (waterLevel == 1)) || !((pumpRunning == 0))) || !((\old(waterLevel) == 1))) && ((!((pumpRunning == 0)) || (!((\result == 0)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,580 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || ((!((tmp == 0)) && !((\result == 0))) && (waterLevel == 1))) && ((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || ((!((tmp == 0)) && !((\result == 0))) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:23:56,580 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,580 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) [2023-11-06 22:23:56,605 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:23:56,606 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:23:56,607 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:23:56,607 INFO L158 Benchmark]: Toolchain (without parser) took 5861.98ms. Allocated memory was 195.0MB in the beginning and 251.7MB in the end (delta: 56.6MB). Free memory was 159.9MB in the beginning and 180.0MB in the end (delta: -20.0MB). Peak memory consumption was 39.7MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,608 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 117.4MB. Free memory is still 64.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:23:56,608 INFO L158 Benchmark]: CACSL2BoogieTranslator took 491.74ms. Allocated memory is still 195.0MB. Free memory was 159.9MB in the beginning and 141.1MB in the end (delta: 18.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,609 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.23ms. Allocated memory is still 195.0MB. Free memory was 141.1MB in the beginning and 139.0MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:23:56,609 INFO L158 Benchmark]: Boogie Preprocessor took 44.91ms. Allocated memory is still 195.0MB. Free memory was 139.0MB in the beginning and 137.6MB in the end (delta: 1.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,609 INFO L158 Benchmark]: RCFGBuilder took 506.56ms. Allocated memory is still 195.0MB. Free memory was 137.6MB in the beginning and 123.6MB in the end (delta: 14.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,610 INFO L158 Benchmark]: TraceAbstraction took 4638.39ms. Allocated memory was 195.0MB in the beginning and 251.7MB in the end (delta: 56.6MB). Free memory was 122.9MB in the beginning and 186.3MB in the end (delta: -63.3MB). Peak memory consumption was 71.5MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,611 INFO L158 Benchmark]: Witness Printer took 123.33ms. Allocated memory is still 251.7MB. Free memory was 186.3MB in the beginning and 180.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 22:23:56,613 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 117.4MB. Free memory is still 64.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 491.74ms. Allocated memory is still 195.0MB. Free memory was 159.9MB in the beginning and 141.1MB in the end (delta: 18.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.23ms. Allocated memory is still 195.0MB. Free memory was 141.1MB in the beginning and 139.0MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 44.91ms. Allocated memory is still 195.0MB. Free memory was 139.0MB in the beginning and 137.6MB in the end (delta: 1.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 506.56ms. Allocated memory is still 195.0MB. Free memory was 137.6MB in the beginning and 123.6MB in the end (delta: 14.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 4638.39ms. Allocated memory was 195.0MB in the beginning and 251.7MB in the end (delta: 56.6MB). Free memory was 122.9MB in the beginning and 186.3MB in the end (delta: -63.3MB). Peak memory consumption was 71.5MB. Max. memory is 16.1GB. * Witness Printer took 123.33ms. Allocated memory is still 251.7MB. Free memory was 186.3MB in the beginning and 180.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [58] - GenericResultAtLocation [Line: 208]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [208] - GenericResultAtLocation [Line: 278]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [278] - GenericResultAtLocation [Line: 305]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [305] - GenericResultAtLocation [Line: 385]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [385] - GenericResultAtLocation [Line: 484]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [484] - GenericResultAtLocation [Line: 850]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [850] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 5 procedures, 62 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.5s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 442 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 437 mSDsluCounter, 1051 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 673 mSDsCounter, 59 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 250 IncrementalHoareTripleChecker+Invalid, 309 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 59 mSolverCounterUnsat, 378 mSDtfsCounter, 250 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 152 GetRequests, 105 SyntacticMatches, 4 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 72 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=180occurred in iteration=6, InterpolantAutomatonStates: 41, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 7 MinimizatonAttempts, 98 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 28 LocationsWithAnnotation, 226 PreInvPairs, 260 NumberOfFragments, 358 HoareAnnotationTreeSize, 226 FomulaSimplifications, 1013 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 28 FomulaSimplificationsInter, 1236 FormulaSimplificationTreeSizeReductionInter, 0.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 246 NumberOfCodeBlocks, 246 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 288 ConstructedInterpolants, 0 QuantifiedInterpolants, 759 SizeOfPredicates, 0 NumberOfNonLiveVariables, 202 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 51/57 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 129]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((!((\result == 0)) && (waterLevel == 1)) || !((pumpRunning == 0))) || !((\old(waterLevel) == 1))) && ((!((pumpRunning == 0)) || (!((\result == 0)) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 222]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || (\old(waterLevel) == waterLevel)) && ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || (waterLevel == 1))) - InvariantResult [Line: 148]: Loop Invariant Derived loop invariant: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) - InvariantResult [Line: 397]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: ((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) && (!((pumpRunning == 0)) || (\old(waterLevel) < 2))) - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: (((!((pumpRunning == 0)) || !((\old(waterLevel) == 1))) || ((!((tmp == 0)) && !((\result == 0))) && (waterLevel == 1))) && ((!((pumpRunning == 0)) || (\old(waterLevel) < 2)) || ((!((tmp == 0)) && !((\result == 0))) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 448]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:23:56,643 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_225069f9-0db2-49f0-9f14-9b2eee3a8f5b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE