./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:52:18,984 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:52:19,062 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:52:19,073 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:52:19,074 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:52:19,105 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:52:19,106 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:52:19,107 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:52:19,108 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:52:19,108 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:52:19,109 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:52:19,110 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:52:19,111 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:52:19,111 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:52:19,112 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:52:19,112 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:52:19,113 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:52:19,114 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:52:19,114 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:52:19,115 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:52:19,115 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:52:19,116 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:52:19,117 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:52:19,117 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:52:19,118 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:52:19,119 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:52:19,119 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:52:19,120 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:52:19,120 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:52:19,121 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:52:19,121 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:52:19,122 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:52:19,122 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:52:19,123 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:52:19,123 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:52:19,124 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:52:19,124 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:52:19,125 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:52:19,125 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:52:19,126 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 [2023-11-06 22:52:19,435 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:52:19,469 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:52:19,471 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:52:19,473 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:52:19,474 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:52:19,475 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-06 22:52:22,627 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:52:22,965 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:52:22,966 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-06 22:52:22,981 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/data/2ef1f2edd/66612013993a457d9f2700ed54bc3d12/FLAG2908258aa [2023-11-06 22:52:22,996 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/data/2ef1f2edd/66612013993a457d9f2700ed54bc3d12 [2023-11-06 22:52:22,999 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:52:23,001 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:52:23,002 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:52:23,004 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:52:23,011 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:52:23,013 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:52:22" (1/1) ... [2023-11-06 22:52:23,014 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8490acf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23, skipping insertion in model container [2023-11-06 22:52:23,014 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:52:22" (1/1) ... [2023-11-06 22:52:23,061 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:52:23,410 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-06 22:52:23,415 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:52:23,432 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:52:23,443 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 22:52:23,445 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] [2023-11-06 22:52:23,445 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] [2023-11-06 22:52:23,446 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] [2023-11-06 22:52:23,446 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] [2023-11-06 22:52:23,446 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] [2023-11-06 22:52:23,447 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] [2023-11-06 22:52:23,447 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] [2023-11-06 22:52:23,543 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-06 22:52:23,544 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:52:23,564 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:52:23,565 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23 WrapperNode [2023-11-06 22:52:23,565 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:52:23,566 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:52:23,566 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:52:23,567 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:52:23,574 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,599 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,639 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 18, statements flattened = 193 [2023-11-06 22:52:23,640 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:52:23,641 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:52:23,641 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:52:23,641 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:52:23,651 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,652 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,654 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,655 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,660 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,664 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,668 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,670 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,673 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:52:23,674 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:52:23,674 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:52:23,674 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:52:23,675 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (1/1) ... [2023-11-06 22:52:23,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:52:23,699 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:52:23,724 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:52:23,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:52:23,768 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:52:23,768 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:52:23,768 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:52:23,769 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:52:23,769 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:52:23,769 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:52:23,769 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:52:23,770 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:52:23,770 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:52:23,770 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:52:23,770 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:52:23,771 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:52:23,771 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:52:23,771 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:52:23,771 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:52:23,772 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:52:23,772 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:52:23,772 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:52:23,772 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:52:23,772 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:52:23,858 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:52:23,860 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:52:24,193 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:52:24,205 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:52:24,211 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:52:24,214 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:24 BoogieIcfgContainer [2023-11-06 22:52:24,215 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:52:24,218 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:52:24,219 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:52:24,222 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:52:24,222 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:52:22" (1/3) ... [2023-11-06 22:52:24,223 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@749e7ae3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:52:24, skipping insertion in model container [2023-11-06 22:52:24,224 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:23" (2/3) ... [2023-11-06 22:52:24,225 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@749e7ae3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:52:24, skipping insertion in model container [2023-11-06 22:52:24,226 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:24" (3/3) ... [2023-11-06 22:52:24,227 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product30.cil.c [2023-11-06 22:52:24,251 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:52:24,251 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:52:24,341 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:52:24,350 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4fad3a69, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:52:24,351 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:52:24,357 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 64 states have (on average 1.375) internal successors, (88), 72 states have internal predecessors, (88), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:52:24,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-06 22:52:24,366 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:24,367 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:24,367 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:24,373 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:24,373 INFO L85 PathProgramCache]: Analyzing trace with hash 1651489756, now seen corresponding path program 1 times [2023-11-06 22:52:24,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:24,381 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874294568] [2023-11-06 22:52:24,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:24,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:24,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:24,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:24,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:24,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874294568] [2023-11-06 22:52:24,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874294568] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:24,642 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:24,642 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:52:24,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [237212504] [2023-11-06 22:52:24,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:24,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:52:24,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:24,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:52:24,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:52:24,689 INFO L87 Difference]: Start difference. First operand has 87 states, 64 states have (on average 1.375) internal successors, (88), 72 states have internal predecessors, (88), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:24,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:24,726 INFO L93 Difference]: Finished difference Result 166 states and 223 transitions. [2023-11-06 22:52:24,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:52:24,728 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-06 22:52:24,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:24,739 INFO L225 Difference]: With dead ends: 166 [2023-11-06 22:52:24,740 INFO L226 Difference]: Without dead ends: 78 [2023-11-06 22:52:24,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:52:24,748 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:24,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:52:24,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-06 22:52:24,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-06 22:52:24,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 57 states have (on average 1.2982456140350878) internal successors, (74), 64 states have internal predecessors, (74), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 22:52:24,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2023-11-06 22:52:24,798 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 19 [2023-11-06 22:52:24,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:24,799 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2023-11-06 22:52:24,799 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:24,799 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2023-11-06 22:52:24,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-06 22:52:24,803 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:24,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:24,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:52:24,804 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:24,804 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:24,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1176523386, now seen corresponding path program 1 times [2023-11-06 22:52:24,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:24,805 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1197745624] [2023-11-06 22:52:24,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:24,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:24,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:24,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:24,984 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:24,984 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1197745624] [2023-11-06 22:52:24,984 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1197745624] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:24,985 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:24,985 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:52:24,985 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [218695038] [2023-11-06 22:52:24,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:24,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:52:24,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:24,989 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:52:24,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:52:24,990 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:25,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:25,010 INFO L93 Difference]: Finished difference Result 121 states and 153 transitions. [2023-11-06 22:52:25,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:52:25,011 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-11-06 22:52:25,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:25,013 INFO L225 Difference]: With dead ends: 121 [2023-11-06 22:52:25,013 INFO L226 Difference]: Without dead ends: 69 [2023-11-06 22:52:25,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:52:25,016 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 13 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:25,017 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 155 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:52:25,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-06 22:52:25,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-06 22:52:25,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 51 states have (on average 1.3137254901960784) internal successors, (67), 58 states have internal predecessors, (67), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:52:25,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 87 transitions. [2023-11-06 22:52:25,032 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 87 transitions. Word has length 20 [2023-11-06 22:52:25,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:25,033 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 87 transitions. [2023-11-06 22:52:25,033 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:25,033 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 87 transitions. [2023-11-06 22:52:25,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:52:25,035 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:25,035 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:25,035 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:52:25,035 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:25,036 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:25,036 INFO L85 PathProgramCache]: Analyzing trace with hash 59160395, now seen corresponding path program 1 times [2023-11-06 22:52:25,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:25,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161013284] [2023-11-06 22:52:25,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:25,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:25,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:25,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:25,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:25,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161013284] [2023-11-06 22:52:25,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161013284] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:25,282 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:25,282 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:52:25,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [834402926] [2023-11-06 22:52:25,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:25,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:52:25,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:25,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:25,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:25,285 INFO L87 Difference]: Start difference. First operand 69 states and 87 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:25,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:25,369 INFO L93 Difference]: Finished difference Result 131 states and 168 transitions. [2023-11-06 22:52:25,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:52:25,370 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-06 22:52:25,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:25,371 INFO L225 Difference]: With dead ends: 131 [2023-11-06 22:52:25,372 INFO L226 Difference]: Without dead ends: 69 [2023-11-06 22:52:25,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:52:25,374 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 112 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:25,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 208 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:52:25,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2023-11-06 22:52:25,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2023-11-06 22:52:25,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 51 states have (on average 1.2941176470588236) internal successors, (66), 58 states have internal predecessors, (66), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:52:25,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 86 transitions. [2023-11-06 22:52:25,389 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 86 transitions. Word has length 25 [2023-11-06 22:52:25,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:25,390 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 86 transitions. [2023-11-06 22:52:25,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:25,390 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 86 transitions. [2023-11-06 22:52:25,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-11-06 22:52:25,392 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:25,392 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:25,393 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:52:25,393 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:25,394 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:25,403 INFO L85 PathProgramCache]: Analyzing trace with hash 1213028198, now seen corresponding path program 1 times [2023-11-06 22:52:25,403 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:25,403 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1912265668] [2023-11-06 22:52:25,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:25,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:25,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:25,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:52:25,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:25,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:25,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:25,601 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:25,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:25,601 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1912265668] [2023-11-06 22:52:25,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1912265668] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:25,602 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:25,602 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:52:25,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555908824] [2023-11-06 22:52:25,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:25,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:52:25,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:25,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:52:25,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:52:25,605 INFO L87 Difference]: Start difference. First operand 69 states and 86 transitions. Second operand has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:52:26,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:26,272 INFO L93 Difference]: Finished difference Result 277 states and 361 transitions. [2023-11-06 22:52:26,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-06 22:52:26,273 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2023-11-06 22:52:26,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:26,277 INFO L225 Difference]: With dead ends: 277 [2023-11-06 22:52:26,278 INFO L226 Difference]: Without dead ends: 215 [2023-11-06 22:52:26,279 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:52:26,281 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 249 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 291 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 365 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:26,282 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [253 Valid, 406 Invalid, 365 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 291 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:52:26,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2023-11-06 22:52:26,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 180. [2023-11-06 22:52:26,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 130 states have (on average 1.2923076923076924) internal successors, (168), 148 states have internal predecessors, (168), 29 states have call successors, (29), 20 states have call predecessors, (29), 20 states have return successors, (32), 17 states have call predecessors, (32), 29 states have call successors, (32) [2023-11-06 22:52:26,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 229 transitions. [2023-11-06 22:52:26,336 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 229 transitions. Word has length 35 [2023-11-06 22:52:26,336 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:26,336 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 229 transitions. [2023-11-06 22:52:26,337 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 3.3333333333333335) internal successors, (30), 8 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:52:26,337 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 229 transitions. [2023-11-06 22:52:26,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:52:26,341 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:26,341 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:26,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:52:26,342 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:26,342 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:26,343 INFO L85 PathProgramCache]: Analyzing trace with hash -1715416827, now seen corresponding path program 1 times [2023-11-06 22:52:26,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:26,343 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273769794] [2023-11-06 22:52:26,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:26,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:26,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:52:26,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-06 22:52:26,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:26,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,412 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:26,413 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:26,413 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273769794] [2023-11-06 22:52:26,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273769794] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:26,413 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:26,413 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:52:26,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277033188] [2023-11-06 22:52:26,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:26,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:52:26,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:26,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:26,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:26,416 INFO L87 Difference]: Start difference. First operand 180 states and 229 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:26,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:26,715 INFO L93 Difference]: Finished difference Result 521 states and 678 transitions. [2023-11-06 22:52:26,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:52:26,716 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 41 [2023-11-06 22:52:26,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:26,727 INFO L225 Difference]: With dead ends: 521 [2023-11-06 22:52:26,727 INFO L226 Difference]: Without dead ends: 348 [2023-11-06 22:52:26,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:52:26,739 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 175 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:26,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 234 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:52:26,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2023-11-06 22:52:26,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 333. [2023-11-06 22:52:26,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 333 states, 249 states have (on average 1.2530120481927711) internal successors, (312), 270 states have internal predecessors, (312), 40 states have call successors, (40), 34 states have call predecessors, (40), 43 states have return successors, (70), 39 states have call predecessors, (70), 40 states have call successors, (70) [2023-11-06 22:52:26,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 333 states to 333 states and 422 transitions. [2023-11-06 22:52:26,838 INFO L78 Accepts]: Start accepts. Automaton has 333 states and 422 transitions. Word has length 41 [2023-11-06 22:52:26,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:26,838 INFO L495 AbstractCegarLoop]: Abstraction has 333 states and 422 transitions. [2023-11-06 22:52:26,839 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:26,840 INFO L276 IsEmpty]: Start isEmpty. Operand 333 states and 422 transitions. [2023-11-06 22:52:26,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-06 22:52:26,848 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:26,851 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:26,852 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:52:26,852 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:26,855 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:26,855 INFO L85 PathProgramCache]: Analyzing trace with hash 1106967663, now seen corresponding path program 1 times [2023-11-06 22:52:26,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:26,858 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1437762598] [2023-11-06 22:52:26,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:26,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:26,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:52:26,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:26,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-06 22:52:26,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:27,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 22:52:27,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:27,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:27,095 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:27,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1437762598] [2023-11-06 22:52:27,096 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1437762598] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:27,096 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:27,096 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:52:27,096 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [128319398] [2023-11-06 22:52:27,097 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:27,097 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:52:27,097 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:27,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:52:27,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:52:27,099 INFO L87 Difference]: Start difference. First operand 333 states and 422 transitions. Second operand has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:27,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:27,773 INFO L93 Difference]: Finished difference Result 1020 states and 1300 transitions. [2023-11-06 22:52:27,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2023-11-06 22:52:27,774 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2023-11-06 22:52:27,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:27,783 INFO L225 Difference]: With dead ends: 1020 [2023-11-06 22:52:27,784 INFO L226 Difference]: Without dead ends: 694 [2023-11-06 22:52:27,786 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 144 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=151, Invalid=551, Unknown=0, NotChecked=0, Total=702 [2023-11-06 22:52:27,793 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 286 mSDsluCounter, 323 mSDsCounter, 0 mSdLazyCounter, 356 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 356 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:27,797 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 381 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 356 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:52:27,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 694 states. [2023-11-06 22:52:27,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 694 to 653. [2023-11-06 22:52:27,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 653 states, 490 states have (on average 1.236734693877551) internal successors, (606), 527 states have internal predecessors, (606), 76 states have call successors, (76), 68 states have call predecessors, (76), 86 states have return successors, (142), 78 states have call predecessors, (142), 76 states have call successors, (142) [2023-11-06 22:52:27,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 653 states to 653 states and 824 transitions. [2023-11-06 22:52:27,930 INFO L78 Accepts]: Start accepts. Automaton has 653 states and 824 transitions. Word has length 44 [2023-11-06 22:52:27,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:27,931 INFO L495 AbstractCegarLoop]: Abstraction has 653 states and 824 transitions. [2023-11-06 22:52:27,931 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.111111111111111) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:27,931 INFO L276 IsEmpty]: Start isEmpty. Operand 653 states and 824 transitions. [2023-11-06 22:52:27,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-06 22:52:27,935 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:27,936 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:27,936 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:52:27,936 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:27,936 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:27,937 INFO L85 PathProgramCache]: Analyzing trace with hash 1742924211, now seen corresponding path program 1 times [2023-11-06 22:52:27,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:27,937 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [526904003] [2023-11-06 22:52:27,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:27,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:27,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:28,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:52:28,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:28,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:52:28,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:28,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:52:28,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:28,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-06 22:52:28,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:28,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:28,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:28,093 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [526904003] [2023-11-06 22:52:28,094 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [526904003] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:28,094 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:28,094 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:52:28,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177755385] [2023-11-06 22:52:28,094 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:28,095 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:52:28,095 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:28,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:52:28,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:52:28,096 INFO L87 Difference]: Start difference. First operand 653 states and 824 transitions. Second operand has 8 states, 8 states have (on average 4.875) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-06 22:52:28,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:28,318 INFO L93 Difference]: Finished difference Result 881 states and 1142 transitions. [2023-11-06 22:52:28,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:52:28,319 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2023-11-06 22:52:28,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:28,319 INFO L225 Difference]: With dead ends: 881 [2023-11-06 22:52:28,319 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:52:28,322 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2023-11-06 22:52:28,323 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 109 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:28,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 132 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:52:28,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:52:28,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:52:28,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:28,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:52:28,325 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 48 [2023-11-06 22:52:28,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:28,325 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:52:28,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.875) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-06 22:52:28,326 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:52:28,326 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:52:28,328 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:52:28,329 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:52:28,331 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:52:29,407 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 290 297) no Hoare annotation was computed. [2023-11-06 22:52:29,407 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 290 297) the Hoare annotation is: true [2023-11-06 22:52:29,407 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 290 297) no Hoare annotation was computed. [2023-11-06 22:52:29,407 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 206 212) no Hoare annotation was computed. [2023-11-06 22:52:29,408 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 206 212) the Hoare annotation is: true [2023-11-06 22:52:29,408 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,408 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:52:29,408 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-06 22:52:29,408 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 817 846) no Hoare annotation was computed. [2023-11-06 22:52:29,409 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2023-11-06 22:52:29,409 INFO L902 garLoopResultBuilder]: At program point L831-1(lines 831 835) the Hoare annotation is: true [2023-11-06 22:52:29,409 INFO L899 garLoopResultBuilder]: For program point L828(line 828) no Hoare annotation was computed. [2023-11-06 22:52:29,409 INFO L902 garLoopResultBuilder]: At program point L827-2(lines 827 841) the Hoare annotation is: true [2023-11-06 22:52:29,409 INFO L902 garLoopResultBuilder]: At program point L823(line 823) the Hoare annotation is: true [2023-11-06 22:52:29,409 INFO L899 garLoopResultBuilder]: For program point L823-1(line 823) no Hoare annotation was computed. [2023-11-06 22:52:29,409 INFO L902 garLoopResultBuilder]: At program point L842(lines 817 846) the Hoare annotation is: true [2023-11-06 22:52:29,409 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 817 846) the Hoare annotation is: true [2023-11-06 22:52:29,410 INFO L899 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2023-11-06 22:52:29,410 INFO L895 garLoopResultBuilder]: At program point L254(line 254) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,410 INFO L895 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,410 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,410 INFO L899 garLoopResultBuilder]: For program point L246-1(line 246) no Hoare annotation was computed. [2023-11-06 22:52:29,410 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 182 205) no Hoare annotation was computed. [2023-11-06 22:52:29,411 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,411 INFO L895 garLoopResultBuilder]: At program point L259-1(lines 240 264) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,411 INFO L899 garLoopResultBuilder]: For program point L193-1(lines 193 199) no Hoare annotation was computed. [2023-11-06 22:52:29,411 INFO L899 garLoopResultBuilder]: For program point L160(lines 160 166) no Hoare annotation was computed. [2023-11-06 22:52:29,411 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 169) no Hoare annotation was computed. [2023-11-06 22:52:29,411 INFO L895 garLoopResultBuilder]: At program point L156-1(lines 148 172) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~0#1| 0)) (not (= |timeShift_getWaterLevel_#res#1| 0))) .cse1 (= |old(~waterLevel~0)| 0)) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2023-11-06 22:52:29,412 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 127 135) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or .cse0 (not (= |timeShift_getWaterLevel_#res#1| 0)) .cse1 (= |old(~waterLevel~0)| 0)))) [2023-11-06 22:52:29,412 INFO L899 garLoopResultBuilder]: For program point L954(line 954) no Hoare annotation was computed. [2023-11-06 22:52:29,412 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 185 204) no Hoare annotation was computed. [2023-11-06 22:52:29,412 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 256) no Hoare annotation was computed. [2023-11-06 22:52:29,412 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 261) no Hoare annotation was computed. [2023-11-06 22:52:29,412 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 950 957) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,413 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 182 205) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,413 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-06 22:52:29,413 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,413 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 182 205) no Hoare annotation was computed. [2023-11-06 22:52:29,413 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 309 317) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| 0)) (or .cse0 (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2023-11-06 22:52:29,413 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 954) no Hoare annotation was computed. [2023-11-06 22:52:29,413 INFO L895 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,414 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 373 380) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,414 INFO L902 garLoopResultBuilder]: At program point L444(lines 383 448) the Hoare annotation is: true [2023-11-06 22:52:29,414 INFO L899 garLoopResultBuilder]: For program point L403(lines 403 409) no Hoare annotation was computed. [2023-11-06 22:52:29,414 INFO L899 garLoopResultBuilder]: For program point L403-1(lines 403 409) no Hoare annotation was computed. [2023-11-06 22:52:29,414 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 878 887) the Hoare annotation is: true [2023-11-06 22:52:29,414 INFO L899 garLoopResultBuilder]: For program point L395(lines 395 399) no Hoare annotation was computed. [2023-11-06 22:52:29,414 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 926 932) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,414 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 891 913) the Hoare annotation is: true [2023-11-06 22:52:29,415 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:52:29,415 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:52:29,415 INFO L895 garLoopResultBuilder]: At program point L441(lines 392 442) the Hoare annotation is: false [2023-11-06 22:52:29,415 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 871 877) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,415 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:52:29,415 INFO L899 garLoopResultBuilder]: For program point L413(lines 413 419) no Hoare annotation was computed. [2023-11-06 22:52:29,415 INFO L899 garLoopResultBuilder]: For program point L413-1(lines 413 419) no Hoare annotation was computed. [2023-11-06 22:52:29,416 INFO L895 garLoopResultBuilder]: At program point L438(lines 393 440) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,416 INFO L895 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,416 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:52:29,416 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 933 939) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,416 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 908) no Hoare annotation was computed. [2023-11-06 22:52:29,416 INFO L899 garLoopResultBuilder]: For program point L901-2(lines 901 908) no Hoare annotation was computed. [2023-11-06 22:52:29,416 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 435) no Hoare annotation was computed. [2023-11-06 22:52:29,416 INFO L895 garLoopResultBuilder]: At program point L431-2(lines 423 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~9#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,417 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 940 948) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:52:29,417 INFO L899 garLoopResultBuilder]: For program point L394(lines 393 440) no Hoare annotation was computed. [2023-11-06 22:52:29,417 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 436) no Hoare annotation was computed. [2023-11-06 22:52:29,417 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:52:29,417 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-06 22:52:29,417 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,417 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 136 144) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,418 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 214 238) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,418 INFO L895 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,418 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,418 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 354 372) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,418 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 230) no Hoare annotation was computed. [2023-11-06 22:52:29,418 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 235) no Hoare annotation was computed. [2023-11-06 22:52:29,418 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 214 238) no Hoare annotation was computed. [2023-11-06 22:52:29,418 INFO L899 garLoopResultBuilder]: For program point L363(lines 363 367) no Hoare annotation was computed. [2023-11-06 22:52:29,419 INFO L899 garLoopResultBuilder]: For program point L363-2(lines 363 367) no Hoare annotation was computed. [2023-11-06 22:52:29,419 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-06 22:52:29,419 INFO L899 garLoopResultBuilder]: For program point L233-1(lines 214 238) no Hoare annotation was computed. [2023-11-06 22:52:29,419 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 95 103) the Hoare annotation is: true [2023-11-06 22:52:29,419 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 298 308) no Hoare annotation was computed. [2023-11-06 22:52:29,419 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 298 308) the Hoare annotation is: true [2023-11-06 22:52:29,419 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 298 308) no Hoare annotation was computed. [2023-11-06 22:52:29,422 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:29,424 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:52:29,443 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:52:29 BoogieIcfgContainer [2023-11-06 22:52:29,443 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:52:29,443 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:52:29,444 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:52:29,444 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:52:29,444 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:24" (3/4) ... [2023-11-06 22:52:29,446 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:52:29,456 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:52:29,456 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:52:29,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:52:29,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:52:29,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:52:29,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:52:29,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:52:29,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:52:29,466 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:52:29,469 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:52:29,470 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:52:29,471 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:52:29,471 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:52:29,502 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:52:29,502 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:52:29,502 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-06 22:52:29,504 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,505 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) [2023-11-06 22:52:29,507 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\result == 0))) || (0 == systemActive)) || (\old(waterLevel) == 0))) [2023-11-06 22:52:29,508 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-06 22:52:29,508 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (!((tmp == 0)) && !((\result == 0)))) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 22:52:29,508 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,509 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 22:52:29,509 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,510 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,562 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:52:29,563 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:52:29,563 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-06 22:52:29,563 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,564 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) [2023-11-06 22:52:29,565 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\result == 0))) || (0 == systemActive)) || (\old(waterLevel) == 0))) [2023-11-06 22:52:29,565 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) [2023-11-06 22:52:29,565 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (!((tmp == 0)) && !((\result == 0)))) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 22:52:29,565 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 22:52:29,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) [2023-11-06 22:52:29,582 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:52:29,582 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:52:29,582 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:52:29,583 INFO L158 Benchmark]: Toolchain (without parser) took 6582.17ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 121.9MB in the beginning and 120.1MB in the end (delta: 1.8MB). Peak memory consumption was 36.2MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,583 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 115.3MB. Free memory is still 65.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:52:29,584 INFO L158 Benchmark]: CACSL2BoogieTranslator took 562.79ms. Allocated memory is still 155.2MB. Free memory was 121.8MB in the beginning and 102.2MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,584 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.91ms. Allocated memory is still 155.2MB. Free memory was 102.2MB in the beginning and 100.2MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,584 INFO L158 Benchmark]: Boogie Preprocessor took 32.40ms. Allocated memory is still 155.2MB. Free memory was 100.2MB in the beginning and 98.7MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:52:29,585 INFO L158 Benchmark]: RCFGBuilder took 541.34ms. Allocated memory is still 155.2MB. Free memory was 98.7MB in the beginning and 82.2MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,585 INFO L158 Benchmark]: TraceAbstraction took 5225.44ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 81.3MB in the beginning and 127.5MB in the end (delta: -46.1MB). Peak memory consumption was 67.7MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,586 INFO L158 Benchmark]: Witness Printer took 138.90ms. Allocated memory is still 186.6MB. Free memory was 127.5MB in the beginning and 120.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:52:29,588 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 115.3MB. Free memory is still 65.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 562.79ms. Allocated memory is still 155.2MB. Free memory was 121.8MB in the beginning and 102.2MB in the end (delta: 19.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.91ms. Allocated memory is still 155.2MB. Free memory was 102.2MB in the beginning and 100.2MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.40ms. Allocated memory is still 155.2MB. Free memory was 100.2MB in the beginning and 98.7MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 541.34ms. Allocated memory is still 155.2MB. Free memory was 98.7MB in the beginning and 82.2MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 5225.44ms. Allocated memory was 155.2MB in the beginning and 186.6MB in the end (delta: 31.5MB). Free memory was 81.3MB in the beginning and 127.5MB in the end (delta: -46.1MB). Peak memory consumption was 67.7MB. Max. memory is 16.1GB. * Witness Printer took 138.90ms. Allocated memory is still 186.6MB. Free memory was 127.5MB in the beginning and 120.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 145]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] - GenericResultAtLocation [Line: 173]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] - GenericResultAtLocation [Line: 449]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] - GenericResultAtLocation [Line: 815]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] - GenericResultAtLocation [Line: 914]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] - GenericResultAtLocation [Line: 949]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 954]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.1s, OverallIterations: 7, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 959 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 944 mSDsluCounter, 1624 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1126 mSDsCounter, 270 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 919 IncrementalHoareTripleChecker+Invalid, 1189 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 270 mSolverCounterUnsat, 498 mSDtfsCounter, 919 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 109 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=653occurred in iteration=6, InterpolantAutomatonStates: 69, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 91 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 801 PreInvPairs, 861 NumberOfFragments, 421 HoareAnnotationTreeSize, 801 FomulaSimplifications, 1395 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 41 FomulaSimplificationsInter, 2869 FormulaSimplificationTreeSizeReductionInter, 0.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 232 NumberOfCodeBlocks, 232 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 225 ConstructedInterpolants, 0 QuantifiedInterpolants, 422 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 373]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) - InvariantResult [Line: 950]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\result == 0))) || (0 == systemActive)) || (\old(waterLevel) == 0))) - InvariantResult [Line: 940]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 148]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (!((tmp == 0)) && !((\result == 0)))) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 393]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (0 == systemActive)) || (\old(waterLevel) == 0)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (0 == systemActive)) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) - InvariantResult [Line: 878]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:52:29,611 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3a2a557-47a1-4b8b-9cf6-634a2ca67924/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE