./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af36d03ba4a1f12ddb625aab4b3f9906d028707aefb4e7150e31be2b1be8c075 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:08:54,779 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:08:54,912 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-21 22:08:54,920 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:08:54,921 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:08:54,966 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:08:54,967 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:08:54,967 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:08:54,969 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:08:54,975 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:08:54,976 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:08:54,976 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:08:54,977 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:08:54,979 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:08:54,980 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:08:54,981 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:08:54,981 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:08:54,982 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:08:54,982 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:08:54,983 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:08:54,983 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:08:54,984 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:08:54,985 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:08:54,985 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:08:54,986 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:08:54,986 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:08:54,987 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:08:54,988 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:08:54,988 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:08:54,989 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:08:54,991 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:08:54,991 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:08:54,991 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:08:54,992 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:08:54,992 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:08:54,992 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:08:54,993 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:08:54,993 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:08:54,994 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:08:54,994 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:08:54,994 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:08:54,995 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:08:54,995 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af36d03ba4a1f12ddb625aab4b3f9906d028707aefb4e7150e31be2b1be8c075 [2023-11-21 22:08:55,340 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:08:55,375 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:08:55,378 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:08:55,380 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:08:55,380 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:08:55,382 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c [2023-11-21 22:08:58,914 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:08:59,331 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:08:59,333 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c [2023-11-21 22:08:59,361 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/data/0648af399/4976aac6ce1f40a5901a4a10ede39888/FLAG9773c6915 [2023-11-21 22:08:59,380 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/data/0648af399/4976aac6ce1f40a5901a4a10ede39888 [2023-11-21 22:08:59,383 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:08:59,385 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:08:59,387 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:08:59,387 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:08:59,397 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:08:59,398 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:08:59,400 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3cfa5c20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59, skipping insertion in model container [2023-11-21 22:08:59,400 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:08:59,460 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:08:59,688 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c[3438,3451] [2023-11-21 22:08:59,805 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:08:59,819 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:08:59,832 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-21 22:08:59,834 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] [2023-11-21 22:08:59,835 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [190] [2023-11-21 22:08:59,835 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [199] [2023-11-21 22:08:59,836 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [431] [2023-11-21 22:08:59,836 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [500] [2023-11-21 22:08:59,836 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [550] [2023-11-21 22:08:59,837 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [916] [2023-11-21 22:08:59,850 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/sv-benchmarks/c/product-lines/minepump_spec5_product32.cil.c[3438,3451] [2023-11-21 22:08:59,914 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:08:59,941 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:08:59,942 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59 WrapperNode [2023-11-21 22:08:59,942 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:08:59,943 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:08:59,944 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:08:59,944 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:08:59,953 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:08:59,972 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,010 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 203 [2023-11-21 22:09:00,011 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:09:00,012 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:09:00,012 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:09:00,012 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:09:00,031 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,032 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,036 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,052 INFO L187 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-21 22:09:00,052 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,052 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,081 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,087 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,090 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,101 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,107 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:09:00,108 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:09:00,110 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:09:00,110 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:09:00,111 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (1/1) ... [2023-11-21 22:09:00,119 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:09:00,134 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:09:00,159 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:09:00,191 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:09:00,226 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:09:00,227 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-21 22:09:00,227 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-21 22:09:00,227 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-21 22:09:00,228 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-21 22:09:00,228 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-21 22:09:00,228 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-21 22:09:00,228 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-21 22:09:00,229 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-21 22:09:00,229 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:09:00,230 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:09:00,230 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-21 22:09:00,231 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-21 22:09:00,231 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-21 22:09:00,232 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-21 22:09:00,232 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-21 22:09:00,233 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-21 22:09:00,234 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:09:00,234 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-21 22:09:00,235 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-21 22:09:00,235 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:09:00,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:09:00,388 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:09:00,400 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:09:00,849 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:09:01,122 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:09:01,123 INFO L308 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-21 22:09:01,125 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:09:01 BoogieIcfgContainer [2023-11-21 22:09:01,125 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:09:01,128 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:09:01,128 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:09:01,140 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:09:01,140 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:08:59" (1/3) ... [2023-11-21 22:09:01,141 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2558fa0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:09:01, skipping insertion in model container [2023-11-21 22:09:01,141 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:08:59" (2/3) ... [2023-11-21 22:09:01,142 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2558fa0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:09:01, skipping insertion in model container [2023-11-21 22:09:01,142 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:09:01" (3/3) ... [2023-11-21 22:09:01,143 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product32.cil.c [2023-11-21 22:09:01,166 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:09:01,167 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:09:01,230 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:09:01,238 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50c9f6e5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:09:01,239 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:09:01,244 INFO L276 IsEmpty]: Start isEmpty. Operand has 71 states, 44 states have (on average 1.4318181818181819) internal successors, (63), 53 states have internal predecessors, (63), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 12 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-21 22:09:01,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-21 22:09:01,258 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:09:01,259 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:09:01,259 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:09:01,266 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:09:01,267 INFO L85 PathProgramCache]: Analyzing trace with hash 1937709648, now seen corresponding path program 1 times [2023-11-21 22:09:01,279 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:09:01,280 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1632786869] [2023-11-21 22:09:01,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:09:01,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:09:01,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:01,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:09:01,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:01,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:09:01,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:01,569 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:09:01,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:09:01,575 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1632786869] [2023-11-21 22:09:01,576 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1632786869] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:09:01,577 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:09:01,577 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:09:01,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300697867] [2023-11-21 22:09:01,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:09:01,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-21 22:09:01,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:09:01,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-21 22:09:01,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:09:01,650 INFO L87 Difference]: Start difference. First operand has 71 states, 44 states have (on average 1.4318181818181819) internal successors, (63), 53 states have internal predecessors, (63), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 12 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:01,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:09:01,770 INFO L93 Difference]: Finished difference Result 140 states and 191 transitions. [2023-11-21 22:09:01,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-21 22:09:01,774 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2023-11-21 22:09:01,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:09:01,786 INFO L225 Difference]: With dead ends: 140 [2023-11-21 22:09:01,786 INFO L226 Difference]: Without dead ends: 66 [2023-11-21 22:09:01,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-21 22:09:01,796 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:09:01,797 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 75 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:09:01,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2023-11-21 22:09:01,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2023-11-21 22:09:01,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 41 states have (on average 1.3414634146341464) internal successors, (55), 49 states have internal predecessors, (55), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-21 22:09:01,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 86 transitions. [2023-11-21 22:09:01,854 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 86 transitions. Word has length 21 [2023-11-21 22:09:01,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:09:01,855 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 86 transitions. [2023-11-21 22:09:01,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.0) internal successors, (14), 2 states have internal predecessors, (14), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:01,855 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 86 transitions. [2023-11-21 22:09:01,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-21 22:09:01,859 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:09:01,860 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:09:01,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:09:01,860 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:09:01,862 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:09:01,862 INFO L85 PathProgramCache]: Analyzing trace with hash -1861247738, now seen corresponding path program 1 times [2023-11-21 22:09:01,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:09:01,863 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406243518] [2023-11-21 22:09:01,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:09:01,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:09:01,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:01,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:09:01,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-21 22:09:02,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,008 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:09:02,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:09:02,016 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406243518] [2023-11-21 22:09:02,016 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406243518] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:09:02,017 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:09:02,017 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:09:02,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2135032257] [2023-11-21 22:09:02,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:09:02,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:09:02,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:09:02,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:09:02,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:09:02,021 INFO L87 Difference]: Start difference. First operand 66 states and 86 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:02,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:09:02,078 INFO L93 Difference]: Finished difference Result 104 states and 134 transitions. [2023-11-21 22:09:02,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:09:02,079 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-21 22:09:02,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:09:02,081 INFO L225 Difference]: With dead ends: 104 [2023-11-21 22:09:02,081 INFO L226 Difference]: Without dead ends: 58 [2023-11-21 22:09:02,082 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:09:02,085 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 14 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 22:09:02,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 106 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 22:09:02,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-11-21 22:09:02,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-11-21 22:09:02,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 36 states have (on average 1.3611111111111112) internal successors, (49), 44 states have internal predecessors, (49), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-21 22:09:02,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 75 transitions. [2023-11-21 22:09:02,100 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 75 transitions. Word has length 22 [2023-11-21 22:09:02,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:09:02,101 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 75 transitions. [2023-11-21 22:09:02,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:02,101 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 75 transitions. [2023-11-21 22:09:02,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-21 22:09:02,104 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:09:02,104 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:09:02,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:09:02,105 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:09:02,105 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:09:02,106 INFO L85 PathProgramCache]: Analyzing trace with hash 1290008401, now seen corresponding path program 1 times [2023-11-21 22:09:02,106 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:09:02,106 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [879306708] [2023-11-21 22:09:02,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:09:02,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:09:02,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-21 22:09:02,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-21 22:09:02,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,286 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:09:02,286 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:09:02,287 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [879306708] [2023-11-21 22:09:02,287 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [879306708] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:09:02,287 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:09:02,288 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:09:02,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1979939018] [2023-11-21 22:09:02,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:09:02,289 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:09:02,289 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:09:02,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:09:02,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:09:02,291 INFO L87 Difference]: Start difference. First operand 58 states and 75 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:09:02,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:09:02,382 INFO L93 Difference]: Finished difference Result 170 states and 222 transitions. [2023-11-21 22:09:02,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:09:02,383 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 25 [2023-11-21 22:09:02,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:09:02,386 INFO L225 Difference]: With dead ends: 170 [2023-11-21 22:09:02,386 INFO L226 Difference]: Without dead ends: 114 [2023-11-21 22:09:02,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:09:02,390 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 67 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:09:02,391 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 132 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:09:02,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2023-11-21 22:09:02,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 111. [2023-11-21 22:09:02,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 68 states have (on average 1.3676470588235294) internal successors, (93), 83 states have internal predecessors, (93), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 17 states have call predecessors, (26), 26 states have call successors, (26) [2023-11-21 22:09:02,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 145 transitions. [2023-11-21 22:09:02,427 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 145 transitions. Word has length 25 [2023-11-21 22:09:02,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:09:02,427 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 145 transitions. [2023-11-21 22:09:02,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-21 22:09:02,428 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 145 transitions. [2023-11-21 22:09:02,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-21 22:09:02,431 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:09:02,432 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:09:02,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:09:02,432 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:09:02,433 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:09:02,433 INFO L85 PathProgramCache]: Analyzing trace with hash -1459376624, now seen corresponding path program 1 times [2023-11-21 22:09:02,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:09:02,434 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786622858] [2023-11-21 22:09:02,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:09:02,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:09:02,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:09:02,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-21 22:09:02,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:09:02,772 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:09:02,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:09:02,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786622858] [2023-11-21 22:09:02,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786622858] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:09:02,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:09:02,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:09:02,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84321192] [2023-11-21 22:09:02,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:09:02,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:09:02,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:09:02,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:09:02,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:09:02,778 INFO L87 Difference]: Start difference. First operand 111 states and 145 transitions. Second operand has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:03,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:09:03,030 INFO L93 Difference]: Finished difference Result 192 states and 251 transitions. [2023-11-21 22:09:03,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:09:03,031 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 28 [2023-11-21 22:09:03,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:09:03,032 INFO L225 Difference]: With dead ends: 192 [2023-11-21 22:09:03,032 INFO L226 Difference]: Without dead ends: 0 [2023-11-21 22:09:03,034 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:09:03,036 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 30 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:09:03,037 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 117 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:09:03,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-21 22:09:03,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-21 22:09:03,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:09:03,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-21 22:09:03,039 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 28 [2023-11-21 22:09:03,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:09:03,040 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-21 22:09:03,040 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.6) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-21 22:09:03,040 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-21 22:09:03,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-21 22:09:03,044 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-21 22:09:03,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:09:03,047 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-21 22:09:03,350 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2023-11-21 22:09:03,351 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 325 332) the Hoare annotation is: true [2023-11-21 22:09:03,351 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 241 247) no Hoare annotation was computed. [2023-11-21 22:09:03,351 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 241 247) the Hoare annotation is: true [2023-11-21 22:09:03,352 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 943 954) the Hoare annotation is: true [2023-11-21 22:09:03,353 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2023-11-21 22:09:03,354 INFO L899 garLoopResultBuilder]: For program point L221-2(lines 217 239) no Hoare annotation was computed. [2023-11-21 22:09:03,354 INFO L899 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2023-11-21 22:09:03,354 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2023-11-21 22:09:03,355 INFO L895 garLoopResultBuilder]: At program point L531(line 531) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,355 INFO L899 garLoopResultBuilder]: For program point L531-1(line 531) no Hoare annotation was computed. [2023-11-21 22:09:03,355 INFO L895 garLoopResultBuilder]: At program point L516(line 516) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,355 INFO L899 garLoopResultBuilder]: For program point L516-1(line 516) no Hoare annotation was computed. [2023-11-21 22:09:03,357 INFO L895 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:09:03,358 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:09:03,358 INFO L895 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:09:03,359 INFO L899 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2023-11-21 22:09:03,360 INFO L899 garLoopResultBuilder]: For program point L533(lines 533 543) no Hoare annotation was computed. [2023-11-21 22:09:03,360 INFO L899 garLoopResultBuilder]: For program point L529(lines 529 546) no Hoare annotation was computed. [2023-11-21 22:09:03,360 INFO L899 garLoopResultBuilder]: For program point L529-1(lines 521 549) no Hoare annotation was computed. [2023-11-21 22:09:03,361 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 214 240) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,361 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,362 INFO L899 garLoopResultBuilder]: For program point L294-1(lines 275 299) no Hoare annotation was computed. [2023-11-21 22:09:03,362 INFO L899 garLoopResultBuilder]: For program point L228-1(lines 228 234) no Hoare annotation was computed. [2023-11-21 22:09:03,363 INFO L899 garLoopResultBuilder]: For program point L195(line 195) no Hoare annotation was computed. [2023-11-21 22:09:03,364 INFO L899 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2023-11-21 22:09:03,364 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 214 240) no Hoare annotation was computed. [2023-11-21 22:09:03,365 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 195) no Hoare annotation was computed. [2023-11-21 22:09:03,366 INFO L902 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2023-11-21 22:09:03,370 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2023-11-21 22:09:03,370 INFO L899 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2023-11-21 22:09:03,371 INFO L899 garLoopResultBuilder]: For program point L115(lines 90 119) no Hoare annotation was computed. [2023-11-21 22:09:03,371 INFO L899 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2023-11-21 22:09:03,372 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 90 119) the Hoare annotation is: true [2023-11-21 22:09:03,373 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2023-11-21 22:09:03,374 INFO L902 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2023-11-21 22:09:03,380 INFO L902 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2023-11-21 22:09:03,380 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2023-11-21 22:09:03,386 INFO L899 garLoopResultBuilder]: For program point L412-1(lines 412 418) no Hoare annotation was computed. [2023-11-21 22:09:03,387 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 184) no Hoare annotation was computed. [2023-11-21 22:09:03,387 INFO L899 garLoopResultBuilder]: For program point L495(lines 432 499) no Hoare annotation was computed. [2023-11-21 22:09:03,387 INFO L899 garLoopResultBuilder]: For program point L177-2(lines 177 184) no Hoare annotation was computed. [2023-11-21 22:09:03,389 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 468) no Hoare annotation was computed. [2023-11-21 22:09:03,389 INFO L899 garLoopResultBuilder]: For program point L462-1(lines 462 468) no Hoare annotation was computed. [2023-11-21 22:09:03,389 INFO L895 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-21 22:09:03,390 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-21 22:09:03,390 INFO L895 garLoopResultBuilder]: At program point L492(lines 441 493) the Hoare annotation is: false [2023-11-21 22:09:03,390 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-21 22:09:03,390 INFO L899 garLoopResultBuilder]: For program point L480(lines 480 486) no Hoare annotation was computed. [2023-11-21 22:09:03,391 INFO L895 garLoopResultBuilder]: At program point L414(line 414) the Hoare annotation is: false [2023-11-21 22:09:03,391 INFO L895 garLoopResultBuilder]: At program point L480-2(lines 472 487) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-21 22:09:03,391 INFO L899 garLoopResultBuilder]: For program point L443(lines 442 491) no Hoare annotation was computed. [2023-11-21 22:09:03,391 INFO L899 garLoopResultBuilder]: For program point L472(lines 472 487) no Hoare annotation was computed. [2023-11-21 22:09:03,392 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-21 22:09:03,392 INFO L895 garLoopResultBuilder]: At program point L489(lines 442 491) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-21 22:09:03,392 INFO L899 garLoopResultBuilder]: For program point L452(lines 452 458) no Hoare annotation was computed. [2023-11-21 22:09:03,393 INFO L899 garLoopResultBuilder]: For program point L452-1(lines 452 458) no Hoare annotation was computed. [2023-11-21 22:09:03,393 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2023-11-21 22:09:03,393 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 931 942) the Hoare annotation is: true [2023-11-21 22:09:03,394 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 249 273) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,394 INFO L895 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:09:03,394 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-21 22:09:03,395 INFO L899 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2023-11-21 22:09:03,395 INFO L899 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2023-11-21 22:09:03,395 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-21 22:09:03,395 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2023-11-21 22:09:03,396 INFO L899 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2023-11-21 22:09:03,396 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2023-11-21 22:09:03,396 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 344 352) the Hoare annotation is: true [2023-11-21 22:09:03,396 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2023-11-21 22:09:03,397 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 333 343) the Hoare annotation is: true [2023-11-21 22:09:03,400 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-21 22:09:03,403 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-21 22:09:03,419 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 10:09:03 BoogieIcfgContainer [2023-11-21 22:09:03,420 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-21 22:09:03,420 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-21 22:09:03,421 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-21 22:09:03,421 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-21 22:09:03,421 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:09:01" (3/4) ... [2023-11-21 22:09:03,424 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-21 22:09:03,430 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-21 22:09:03,430 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-21 22:09:03,431 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-21 22:09:03,431 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-21 22:09:03,431 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-21 22:09:03,431 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-21 22:09:03,432 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-21 22:09:03,432 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-21 22:09:03,432 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-21 22:09:03,457 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 44 nodes and edges [2023-11-21 22:09:03,458 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-21 22:09:03,459 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-21 22:09:03,460 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:09:03,460 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-21 22:09:03,633 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/witness.graphml [2023-11-21 22:09:03,634 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/witness.yml [2023-11-21 22:09:03,634 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-21 22:09:03,635 INFO L158 Benchmark]: Toolchain (without parser) took 4250.17ms. Allocated memory is still 180.4MB. Free memory was 134.0MB in the beginning and 106.4MB in the end (delta: 27.6MB). Peak memory consumption was 28.7MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,635 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 117.4MB. Free memory is still 67.5MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-21 22:09:03,636 INFO L158 Benchmark]: CACSL2BoogieTranslator took 555.77ms. Allocated memory is still 180.4MB. Free memory was 133.7MB in the beginning and 114.1MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,636 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.62ms. Allocated memory is still 180.4MB. Free memory was 114.1MB in the beginning and 112.0MB in the end (delta: 2.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,637 INFO L158 Benchmark]: Boogie Preprocessor took 95.51ms. Allocated memory is still 180.4MB. Free memory was 111.7MB in the beginning and 109.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,637 INFO L158 Benchmark]: RCFGBuilder took 1016.74ms. Allocated memory is still 180.4MB. Free memory was 109.6MB in the beginning and 139.8MB in the end (delta: -30.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,638 INFO L158 Benchmark]: TraceAbstraction took 2292.05ms. Allocated memory is still 180.4MB. Free memory was 139.1MB in the beginning and 113.8MB in the end (delta: 25.3MB). Peak memory consumption was 27.1MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,638 INFO L158 Benchmark]: Witness Printer took 213.97ms. Allocated memory is still 180.4MB. Free memory was 113.8MB in the beginning and 106.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-21 22:09:03,641 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 117.4MB. Free memory is still 67.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 555.77ms. Allocated memory is still 180.4MB. Free memory was 133.7MB in the beginning and 114.1MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.62ms. Allocated memory is still 180.4MB. Free memory was 114.1MB in the beginning and 112.0MB in the end (delta: 2.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 95.51ms. Allocated memory is still 180.4MB. Free memory was 111.7MB in the beginning and 109.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1016.74ms. Allocated memory is still 180.4MB. Free memory was 109.6MB in the beginning and 139.8MB in the end (delta: -30.3MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 2292.05ms. Allocated memory is still 180.4MB. Free memory was 139.1MB in the beginning and 113.8MB in the end (delta: 25.3MB). Peak memory consumption was 27.1MB. Max. memory is 16.1GB. * Witness Printer took 213.97ms. Allocated memory is still 180.4MB. Free memory was 113.8MB in the beginning and 106.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] - GenericResultAtLocation [Line: 190]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [190] - GenericResultAtLocation [Line: 199]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [199] - GenericResultAtLocation [Line: 431]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [431] - GenericResultAtLocation [Line: 500]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [500] - GenericResultAtLocation [Line: 550]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [550] - GenericResultAtLocation [Line: 916]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [916] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 195]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 71 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.2s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 116 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 111 mSDsluCounter, 430 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 188 mSDsCounter, 5 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 150 IncrementalHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5 mSolverCounterUnsat, 242 mSDtfsCounter, 150 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 32 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=111occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 189 PreInvPairs, 199 NumberOfFragments, 108 HoareAnnotationTreeSize, 189 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 27 FomulaSimplificationsInter, 256 FormulaSimplificationTreeSizeReductionInter, 0.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 96 NumberOfCodeBlocks, 96 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 92 ConstructedInterpolants, 0 QuantifiedInterpolants, 150 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 8/8 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 333]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-21 22:09:03,673 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cadc87e6-0cf2-4af6-bde9-2049b8554cb4/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE