./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7491e9e7e66695ce6d97d4c4c38cf37fc3e1ef2df09eb8fb958f4ec180b71f50 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:14:24,638 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:14:24,748 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:14:24,757 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:14:24,758 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:14:24,794 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:14:24,798 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:14:24,798 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:14:24,799 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:14:24,804 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:14:24,805 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:14:24,805 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:14:24,806 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:14:24,808 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:14:24,808 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:14:24,809 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:14:24,809 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:14:24,809 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:14:24,810 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:14:24,810 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:14:24,811 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:14:24,811 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:14:24,812 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:14:24,812 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:14:24,812 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:14:24,813 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:14:24,813 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:14:24,814 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:14:24,815 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:14:24,815 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:14:24,816 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:14:24,816 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:14:24,817 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:14:24,817 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:14:24,817 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:14:24,817 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:14:24,818 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:14:24,818 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:14:24,818 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:14:24,818 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:14:24,819 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:14:24,819 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:14:24,819 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7491e9e7e66695ce6d97d4c4c38cf37fc3e1ef2df09eb8fb958f4ec180b71f50 [2023-11-21 22:14:25,123 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:14:25,145 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:14:25,148 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:14:25,149 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:14:25,150 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:14:25,151 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c [2023-11-21 22:14:28,225 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:14:28,573 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:14:28,575 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c [2023-11-21 22:14:28,596 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/data/ae8f84e88/5ed50b59559f4bc6b158ac4139ee9b02/FLAG4362c44eb [2023-11-21 22:14:28,616 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/data/ae8f84e88/5ed50b59559f4bc6b158ac4139ee9b02 [2023-11-21 22:14:28,624 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:14:28,625 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:14:28,630 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:14:28,631 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:14:28,636 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:14:28,640 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:14:28" (1/1) ... [2023-11-21 22:14:28,641 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4cae3339 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:28, skipping insertion in model container [2023-11-21 22:14:28,642 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:14:28" (1/1) ... [2023-11-21 22:14:28,690 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:14:28,917 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c[2567,2580] [2023-11-21 22:14:29,116 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:14:29,131 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:14:29,143 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [49] [2023-11-21 22:14:29,144 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [78] [2023-11-21 22:14:29,145 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [116] [2023-11-21 22:14:29,145 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [125] [2023-11-21 22:14:29,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [226] [2023-11-21 22:14:29,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [319] [2023-11-21 22:14:29,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [685] [2023-11-21 22:14:29,146 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [907] [2023-11-21 22:14:29,171 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/sv-benchmarks/c/product-lines/minepump_spec4_product32.cil.c[2567,2580] [2023-11-21 22:14:29,237 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:14:29,257 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:14:29,258 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29 WrapperNode [2023-11-21 22:14:29,258 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:14:29,259 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:14:29,260 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:14:29,260 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:14:29,268 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,292 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,328 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 23, calls inlined = 19, statements flattened = 198 [2023-11-21 22:14:29,329 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:14:29,330 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:14:29,330 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:14:29,330 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:14:29,345 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,345 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,349 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,363 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:14:29,369 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,370 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,375 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,380 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,382 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,384 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,387 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:14:29,388 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:14:29,388 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:14:29,388 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:14:29,389 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (1/1) ... [2023-11-21 22:14:29,395 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:14:29,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:14:29,426 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:14:29,471 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:14:29,490 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:14:29,491 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:14:29,491 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:14:29,491 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:14:29,491 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:14:29,491 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:14:29,492 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:14:29,492 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:14:29,492 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:14:29,492 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:14:29,493 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:14:29,493 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-21 22:14:29,494 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-21 22:14:29,494 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:14:29,495 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:14:29,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:14:29,496 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:14:29,497 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:14:29,497 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:14:29,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:14:29,595 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:14:29,598 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:14:29,977 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:14:30,157 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:14:30,160 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:14:30,162 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:14:30 BoogieIcfgContainer [2023-11-21 22:14:30,162 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:14:30,165 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:14:30,166 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:14:30,169 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:14:30,170 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:14:28" (1/3) ... [2023-11-21 22:14:30,170 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@288c366d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:14:30, skipping insertion in model container [2023-11-21 22:14:30,171 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:14:29" (2/3) ... [2023-11-21 22:14:30,171 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@288c366d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:14:30, skipping insertion in model container [2023-11-21 22:14:30,171 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:14:30" (3/3) ... [2023-11-21 22:14:30,173 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product32.cil.c [2023-11-21 22:14:30,196 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:14:30,196 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:14:30,255 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:14:30,262 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5e8fdf49, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:14:30,263 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:14:30,267 INFO L276 IsEmpty]: Start isEmpty. Operand has 64 states, 40 states have (on average 1.45) internal successors, (58), 49 states have internal predecessors, (58), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-21 22:14:30,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-21 22:14:30,277 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:14:30,278 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:14:30,279 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:14:30,285 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:14:30,285 INFO L85 PathProgramCache]: Analyzing trace with hash 61650838, now seen corresponding path program 1 times [2023-11-21 22:14:30,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:14:30,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [319766058] [2023-11-21 22:14:30,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:14:30,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:14:30,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:14:30,564 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:14:30,565 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:14:30,565 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [319766058] [2023-11-21 22:14:30,566 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [319766058] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:14:30,566 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:14:30,567 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:14:30,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247297796] [2023-11-21 22:14:30,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:14:30,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:14:30,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:14:30,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:14:30,625 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:14:30,627 INFO L87 Difference]: Start difference. First operand has 64 states, 40 states have (on average 1.45) internal successors, (58), 49 states have internal predecessors, (58), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:30,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:14:30,703 INFO L93 Difference]: Finished difference Result 126 states and 173 transitions. [2023-11-21 22:14:30,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:14:30,705 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-21 22:14:30,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:14:30,717 INFO L225 Difference]: With dead ends: 126 [2023-11-21 22:14:30,717 INFO L226 Difference]: Without dead ends: 59 [2023-11-21 22:14:30,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:14:30,731 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:14:30,733 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:14:30,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-11-21 22:14:30,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2023-11-21 22:14:30,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.3513513513513513) internal successors, (50), 45 states have internal predecessors, (50), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-21 22:14:30,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2023-11-21 22:14:30,796 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2023-11-21 22:14:30,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:14:30,797 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2023-11-21 22:14:30,798 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:30,798 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2023-11-21 22:14:30,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-21 22:14:30,803 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:14:30,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:14:30,803 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:14:30,803 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:14:30,805 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:14:30,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1875051383, now seen corresponding path program 1 times [2023-11-21 22:14:30,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:14:30,806 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241644566] [2023-11-21 22:14:30,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:14:30,807 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:14:30,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:14:30,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:14:30,981 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:14:30,982 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241644566] [2023-11-21 22:14:30,982 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241644566] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:14:30,983 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:14:30,983 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:14:30,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [303976155] [2023-11-21 22:14:30,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:14:30,986 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:14:30,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:14:30,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:14:30,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:14:30,994 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:14:31,056 INFO L93 Difference]: Finished difference Result 90 states and 116 transitions. [2023-11-21 22:14:31,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:14:31,057 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-21 22:14:31,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:14:31,059 INFO L225 Difference]: With dead ends: 90 [2023-11-21 22:14:31,059 INFO L226 Difference]: Without dead ends: 51 [2023-11-21 22:14:31,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:14:31,062 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:14:31,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 88 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:14:31,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2023-11-21 22:14:31,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2023-11-21 22:14:31,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 32 states have (on average 1.375) internal successors, (44), 40 states have internal predecessors, (44), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 7 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-21 22:14:31,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 66 transitions. [2023-11-21 22:14:31,103 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 66 transitions. Word has length 13 [2023-11-21 22:14:31,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:14:31,103 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 66 transitions. [2023-11-21 22:14:31,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,104 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 66 transitions. [2023-11-21 22:14:31,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-21 22:14:31,106 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:14:31,106 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:14:31,106 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:14:31,106 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:14:31,107 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:14:31,107 INFO L85 PathProgramCache]: Analyzing trace with hash -1008817254, now seen corresponding path program 1 times [2023-11-21 22:14:31,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:14:31,108 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [614930869] [2023-11-21 22:14:31,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:14:31,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:14:31,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:14:31,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:14:31,242 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:14:31,242 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [614930869] [2023-11-21 22:14:31,243 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [614930869] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:14:31,243 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:14:31,243 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:14:31,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573131482] [2023-11-21 22:14:31,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:14:31,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:14:31,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:14:31,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:14:31,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:14:31,246 INFO L87 Difference]: Start difference. First operand 51 states and 66 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:14:31,390 INFO L93 Difference]: Finished difference Result 129 states and 168 transitions. [2023-11-21 22:14:31,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:14:31,391 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-21 22:14:31,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:14:31,393 INFO L225 Difference]: With dead ends: 129 [2023-11-21 22:14:31,396 INFO L226 Difference]: Without dead ends: 80 [2023-11-21 22:14:31,398 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:14:31,403 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 89 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:14:31,409 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 115 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:14:31,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-21 22:14:31,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 77. [2023-11-21 22:14:31,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 50 states have (on average 1.38) internal successors, (69), 61 states have internal predecessors, (69), 15 states have call successors, (15), 11 states have call predecessors, (15), 11 states have return successors, (16), 10 states have call predecessors, (16), 15 states have call successors, (16) [2023-11-21 22:14:31,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 100 transitions. [2023-11-21 22:14:31,430 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 100 transitions. Word has length 16 [2023-11-21 22:14:31,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:14:31,430 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 100 transitions. [2023-11-21 22:14:31,431 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,431 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 100 transitions. [2023-11-21 22:14:31,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-21 22:14:31,433 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:14:31,433 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:14:31,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:14:31,434 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:14:31,434 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:14:31,435 INFO L85 PathProgramCache]: Analyzing trace with hash -962791602, now seen corresponding path program 1 times [2023-11-21 22:14:31,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:14:31,435 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423351024] [2023-11-21 22:14:31,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:14:31,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:14:31,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:14:31,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:14:31,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:14:31,608 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423351024] [2023-11-21 22:14:31,609 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423351024] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:14:31,609 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:14:31,609 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:14:31,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872881579] [2023-11-21 22:14:31,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:14:31,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:14:31,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:14:31,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:14:31,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:14:31,611 INFO L87 Difference]: Start difference. First operand 77 states and 100 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:14:31,684 INFO L93 Difference]: Finished difference Result 136 states and 180 transitions. [2023-11-21 22:14:31,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:14:31,685 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-21 22:14:31,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:14:31,685 INFO L225 Difference]: With dead ends: 136 [2023-11-21 22:14:31,685 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:14:31,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:14:31,688 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 27 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:14:31,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 54 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:14:31,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:14:31,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:14:31,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:14:31,690 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 19 [2023-11-21 22:14:31,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:14:31,690 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:14:31,690 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:14:31,691 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:14:31,691 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:14:31,694 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:14:31,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:14:31,709 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:14:31,944 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 801 808) no Hoare annotation was computed. [2023-11-21 22:14:31,944 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 801 808) the Hoare annotation is: true [2023-11-21 22:14:31,945 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 717 723) no Hoare annotation was computed. [2023-11-21 22:14:31,945 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 717 723) the Hoare annotation is: true [2023-11-21 22:14:31,945 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 257 268) the Hoare annotation is: true [2023-11-21 22:14:31,945 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 257 268) no Hoare annotation was computed. [2023-11-21 22:14:31,946 INFO L899 garLoopResultBuilder]: For program point L770-1(lines 751 775) no Hoare annotation was computed. [2023-11-21 22:14:31,946 INFO L899 garLoopResultBuilder]: For program point L704-1(lines 704 710) no Hoare annotation was computed. [2023-11-21 22:14:31,946 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2023-11-21 22:14:31,946 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2023-11-21 22:14:31,946 INFO L899 garLoopResultBuilder]: For program point L61-1(lines 53 77) no Hoare annotation was computed. [2023-11-21 22:14:31,947 INFO L899 garLoopResultBuilder]: For program point L697-1(lines 696 715) no Hoare annotation was computed. [2023-11-21 22:14:31,947 INFO L899 garLoopResultBuilder]: For program point L759(lines 759 767) no Hoare annotation was computed. [2023-11-21 22:14:31,947 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 772) no Hoare annotation was computed. [2023-11-21 22:14:31,947 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 693 716) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:14:31,948 INFO L895 garLoopResultBuilder]: At program point L765(line 765) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:14:31,948 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:14:31,948 INFO L899 garLoopResultBuilder]: For program point L121(line 121) no Hoare annotation was computed. [2023-11-21 22:14:31,948 INFO L895 garLoopResultBuilder]: At program point L757(line 757) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:14:31,948 INFO L899 garLoopResultBuilder]: For program point L757-1(line 757) no Hoare annotation was computed. [2023-11-21 22:14:31,949 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 693 716) no Hoare annotation was computed. [2023-11-21 22:14:31,949 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 121) no Hoare annotation was computed. [2023-11-21 22:14:31,949 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-21 22:14:31,949 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 128 157) no Hoare annotation was computed. [2023-11-21 22:14:31,949 INFO L899 garLoopResultBuilder]: For program point L153(lines 128 157) no Hoare annotation was computed. [2023-11-21 22:14:31,950 INFO L899 garLoopResultBuilder]: For program point L149(line 149) no Hoare annotation was computed. [2023-11-21 22:14:31,950 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 146) no Hoare annotation was computed. [2023-11-21 22:14:31,950 INFO L902 garLoopResultBuilder]: At program point L142-1(lines 142 146) the Hoare annotation is: true [2023-11-21 22:14:31,950 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 128 157) the Hoare annotation is: true [2023-11-21 22:14:31,951 INFO L902 garLoopResultBuilder]: At program point L138-2(lines 138 152) the Hoare annotation is: true [2023-11-21 22:14:31,951 INFO L902 garLoopResultBuilder]: At program point L134(line 134) the Hoare annotation is: true [2023-11-21 22:14:31,951 INFO L899 garLoopResultBuilder]: For program point L134-1(line 134) no Hoare annotation was computed. [2023-11-21 22:14:31,951 INFO L899 garLoopResultBuilder]: For program point L956(lines 956 962) no Hoare annotation was computed. [2023-11-21 22:14:31,951 INFO L895 garLoopResultBuilder]: At program point L890(line 890) the Hoare annotation is: false [2023-11-21 22:14:31,952 INFO L895 garLoopResultBuilder]: At program point L956-2(lines 948 963) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-21 22:14:31,952 INFO L899 garLoopResultBuilder]: For program point L919(lines 918 967) no Hoare annotation was computed. [2023-11-21 22:14:31,952 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 220) no Hoare annotation was computed. [2023-11-21 22:14:31,952 INFO L899 garLoopResultBuilder]: For program point L948(lines 948 963) no Hoare annotation was computed. [2023-11-21 22:14:31,952 INFO L899 garLoopResultBuilder]: For program point L213-2(lines 213 220) no Hoare annotation was computed. [2023-11-21 22:14:31,953 INFO L895 garLoopResultBuilder]: At program point L940(line 940) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-21 22:14:31,953 INFO L895 garLoopResultBuilder]: At program point L965(lines 918 967) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-21 22:14:31,953 INFO L899 garLoopResultBuilder]: For program point L928(lines 928 934) no Hoare annotation was computed. [2023-11-21 22:14:31,953 INFO L899 garLoopResultBuilder]: For program point L928-1(lines 928 934) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point L888(lines 888 894) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 888 894) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point L971(lines 908 975) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point L938(lines 938 944) no Hoare annotation was computed. [2023-11-21 22:14:31,954 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:14:31,955 INFO L899 garLoopResultBuilder]: For program point L938-1(lines 938 944) no Hoare annotation was computed. [2023-11-21 22:14:31,955 INFO L895 garLoopResultBuilder]: At program point L930(line 930) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1)) [2023-11-21 22:14:31,955 INFO L895 garLoopResultBuilder]: At program point L968(lines 917 969) the Hoare annotation is: false [2023-11-21 22:14:31,955 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 245 256) no Hoare annotation was computed. [2023-11-21 22:14:31,956 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 245 256) the Hoare annotation is: true [2023-11-21 22:14:31,956 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-21 22:14:31,956 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2023-11-21 22:14:31,956 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2023-11-21 22:14:31,956 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 725 749) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-21 22:14:31,957 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-21 22:14:31,957 INFO L899 garLoopResultBuilder]: For program point L744-1(lines 725 749) no Hoare annotation was computed. [2023-11-21 22:14:31,957 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 725 749) no Hoare annotation was computed. [2023-11-21 22:14:31,957 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-21 22:14:31,957 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 809 819) no Hoare annotation was computed. [2023-11-21 22:14:31,958 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 809 819) the Hoare annotation is: true [2023-11-21 22:14:31,961 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-21 22:14:31,963 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:14:31,977 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:14:31 BoogieIcfgContainer [2023-11-21 22:14:31,977 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:14:31,978 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:14:31,978 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:14:31,978 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:14:31,979 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:14:30" (3/4) ... [2023-11-21 22:14:31,981 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:14:31,985 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:14:31,985 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:14:31,985 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:14:31,986 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:14:31,986 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:14:31,986 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:14:31,986 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:14:31,987 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-21 22:14:31,995 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2023-11-21 22:14:31,996 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-21 22:14:31,997 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:14:31,998 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:14:31,999 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:14:32,030 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-21 22:14:32,064 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) [2023-11-21 22:14:32,117 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:14:32,117 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:14:32,117 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:14:32,118 INFO L158 Benchmark]: Toolchain (without parser) took 3493.03ms. Allocated memory was 132.1MB in the beginning and 186.6MB in the end (delta: 54.5MB). Free memory was 86.1MB in the beginning and 135.5MB in the end (delta: -49.4MB). Peak memory consumption was 3.7MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,119 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory was 103.0MB in the beginning and 102.9MB in the end (delta: 85.2kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:14:32,119 INFO L158 Benchmark]: CACSL2BoogieTranslator took 628.27ms. Allocated memory is still 132.1MB. Free memory was 86.1MB in the beginning and 66.5MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,120 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.76ms. Allocated memory is still 132.1MB. Free memory was 66.5MB in the beginning and 64.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,120 INFO L158 Benchmark]: Boogie Preprocessor took 57.26ms. Allocated memory is still 132.1MB. Free memory was 64.1MB in the beginning and 62.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,120 INFO L158 Benchmark]: RCFGBuilder took 774.53ms. Allocated memory was 132.1MB in the beginning and 186.6MB in the end (delta: 54.5MB). Free memory was 62.0MB in the beginning and 149.1MB in the end (delta: -87.1MB). Peak memory consumption was 23.8MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,121 INFO L158 Benchmark]: TraceAbstraction took 1811.86ms. Allocated memory is still 186.6MB. Free memory was 148.0MB in the beginning and 142.9MB in the end (delta: 5.1MB). Peak memory consumption was 5.0MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,121 INFO L158 Benchmark]: Witness Printer took 139.71ms. Allocated memory is still 186.6MB. Free memory was 142.9MB in the beginning and 135.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-21 22:14:32,123 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 132.1MB. Free memory was 103.0MB in the beginning and 102.9MB in the end (delta: 85.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 628.27ms. Allocated memory is still 132.1MB. Free memory was 86.1MB in the beginning and 66.5MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.76ms. Allocated memory is still 132.1MB. Free memory was 66.5MB in the beginning and 64.1MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 57.26ms. Allocated memory is still 132.1MB. Free memory was 64.1MB in the beginning and 62.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 774.53ms. Allocated memory was 132.1MB in the beginning and 186.6MB in the end (delta: 54.5MB). Free memory was 62.0MB in the beginning and 149.1MB in the end (delta: -87.1MB). Peak memory consumption was 23.8MB. Max. memory is 16.1GB. * TraceAbstraction took 1811.86ms. Allocated memory is still 186.6MB. Free memory was 148.0MB in the beginning and 142.9MB in the end (delta: 5.1MB). Peak memory consumption was 5.0MB. Max. memory is 16.1GB. * Witness Printer took 139.71ms. Allocated memory is still 186.6MB. Free memory was 142.9MB in the beginning and 135.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [49] - GenericResultAtLocation [Line: 78]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [78] - GenericResultAtLocation [Line: 116]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [116] - GenericResultAtLocation [Line: 125]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [125] - GenericResultAtLocation [Line: 226]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [226] - GenericResultAtLocation [Line: 319]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [319] - GenericResultAtLocation [Line: 685]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [685] - GenericResultAtLocation [Line: 907]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [907] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 121]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 64 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 138 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 130 mSDsluCounter, 323 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 126 mSDsCounter, 12 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 116 IncrementalHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 12 mSolverCounterUnsat, 197 mSDtfsCounter, 116 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 16 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=77occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 24 LocationsWithAnnotation, 137 PreInvPairs, 145 NumberOfFragments, 122 HoareAnnotationTreeSize, 137 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 24 FomulaSimplificationsInter, 176 FormulaSimplificationTreeSizeReductionInter, 0.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 60 NumberOfCodeBlocks, 60 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 56 ConstructedInterpolants, 0 QuantifiedInterpolants, 105 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 809]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (splverifierCounter == 0)) && (tmp == 1)) - InvariantResult [Line: 693]: Loop Invariant Derived loop invariant: (!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) RESULT: Ultimate proved your program to be correct! [2023-11-21 22:14:32,162 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2eacd38b-c937-438c-a848-12df272c678c/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE