./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 22:41:34,337 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 22:41:34,408 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-23 22:41:34,414 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 22:41:34,415 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 22:41:34,446 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 22:41:34,447 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 22:41:34,448 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 22:41:34,449 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-23 22:41:34,449 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-23 22:41:34,450 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 22:41:34,450 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 22:41:34,451 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-23 22:41:34,452 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-23 22:41:34,452 INFO L153 SettingsManager]: * Use SBE=true [2023-11-23 22:41:34,453 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 22:41:34,454 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 22:41:34,454 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 22:41:34,455 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 22:41:34,455 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 22:41:34,456 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 22:41:34,457 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 22:41:34,458 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 22:41:34,458 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 22:41:34,459 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 22:41:34,459 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 22:41:34,460 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 22:41:34,461 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 22:41:34,462 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-23 22:41:34,462 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 22:41:34,463 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 22:41:34,463 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 22:41:34,464 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 22:41:34,465 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 22:41:34,465 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 22:41:34,466 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-23 22:41:34,466 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 22:41:34,467 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 22:41:34,468 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-23 22:41:34,468 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 22:41:34,469 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-23 22:41:34,470 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 22:41:34,470 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 [2023-11-23 22:41:34,806 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 22:41:34,838 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 22:41:34,841 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 22:41:34,844 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 22:41:34,845 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 22:41:34,847 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-23 22:41:38,041 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 22:41:38,280 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 22:41:38,281 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-23 22:41:38,298 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/data/486eb6bc3/be658cd8ed3642169a41cf9f9ac418b5/FLAG9cd80df5c [2023-11-23 22:41:38,312 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/data/486eb6bc3/be658cd8ed3642169a41cf9f9ac418b5 [2023-11-23 22:41:38,314 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 22:41:38,316 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 22:41:38,318 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 22:41:38,318 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 22:41:38,323 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 22:41:38,324 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,325 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@416b7657 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38, skipping insertion in model container [2023-11-23 22:41:38,325 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,383 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 22:41:38,681 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-23 22:41:38,720 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 22:41:38,736 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 22:41:38,755 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-23 22:41:38,757 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] [2023-11-23 22:41:38,758 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-11-23 22:41:38,759 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] [2023-11-23 22:41:38,763 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] [2023-11-23 22:41:38,764 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] [2023-11-23 22:41:38,764 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] [2023-11-23 22:41:38,764 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] [2023-11-23 22:41:38,849 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-23 22:41:38,861 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 22:41:38,887 INFO L206 MainTranslator]: Completed translation [2023-11-23 22:41:38,887 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38 WrapperNode [2023-11-23 22:41:38,887 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 22:41:38,888 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 22:41:38,889 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 22:41:38,889 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 22:41:38,896 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,911 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,937 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 166 [2023-11-23 22:41:38,938 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 22:41:38,939 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 22:41:38,939 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 22:41:38,939 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 22:41:38,956 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,957 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,959 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,973 INFO L189 HeapSplitter]: Split 2 memory accesses to 1 slices as follows [2] [2023-11-23 22:41:38,973 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,974 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,981 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,993 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,995 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,997 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:38,999 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 22:41:39,000 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 22:41:39,000 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 22:41:39,001 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 22:41:39,002 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (1/1) ... [2023-11-23 22:41:39,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 22:41:39,039 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 22:41:39,052 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 22:41:39,077 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 22:41:39,098 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 22:41:39,099 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 22:41:39,099 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 22:41:39,100 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 22:41:39,100 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 22:41:39,100 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 22:41:39,100 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 22:41:39,100 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-23 22:41:39,101 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-23 22:41:39,101 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-23 22:41:39,102 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-23 22:41:39,102 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 22:41:39,102 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 22:41:39,103 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-23 22:41:39,103 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 22:41:39,103 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 22:41:39,103 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 22:41:39,104 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 22:41:39,238 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 22:41:39,240 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 22:41:39,528 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 22:41:39,607 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 22:41:39,607 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 22:41:39,608 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:41:39 BoogieIcfgContainer [2023-11-23 22:41:39,608 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 22:41:39,611 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 22:41:39,612 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 22:41:39,615 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 22:41:39,616 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 10:41:38" (1/3) ... [2023-11-23 22:41:39,617 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@22025695 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:41:39, skipping insertion in model container [2023-11-23 22:41:39,617 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 10:41:38" (2/3) ... [2023-11-23 22:41:39,617 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@22025695 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 10:41:39, skipping insertion in model container [2023-11-23 22:41:39,618 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:41:39" (3/3) ... [2023-11-23 22:41:39,619 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product16.cil.c [2023-11-23 22:41:39,640 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 22:41:39,640 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 22:41:39,687 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 22:41:39,694 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@71163e1c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 22:41:39,695 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 22:41:39,699 INFO L276 IsEmpty]: Start isEmpty. Operand has 60 states, 40 states have (on average 1.55) internal successors, (62), 47 states have internal predecessors, (62), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-23 22:41:39,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-23 22:41:39,709 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:39,709 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:39,710 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:39,716 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:39,716 INFO L85 PathProgramCache]: Analyzing trace with hash 1280737313, now seen corresponding path program 1 times [2023-11-23 22:41:39,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:39,727 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038741088] [2023-11-23 22:41:39,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:39,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:39,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:39,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:39,933 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:39,933 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038741088] [2023-11-23 22:41:39,934 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038741088] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:39,935 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:39,935 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 22:41:39,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035817481] [2023-11-23 22:41:39,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:39,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 22:41:39,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:39,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 22:41:39,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 22:41:39,973 INFO L87 Difference]: Start difference. First operand has 60 states, 40 states have (on average 1.55) internal successors, (62), 47 states have internal predecessors, (62), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:40,046 INFO L93 Difference]: Finished difference Result 118 states and 169 transitions. [2023-11-23 22:41:40,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 22:41:40,049 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-23 22:41:40,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:40,060 INFO L225 Difference]: With dead ends: 118 [2023-11-23 22:41:40,060 INFO L226 Difference]: Without dead ends: 55 [2023-11-23 22:41:40,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 22:41:40,072 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:40,075 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 22:41:40,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2023-11-23 22:41:40,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2023-11-23 22:41:40,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 37 states have (on average 1.4054054054054055) internal successors, (52), 43 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-23 22:41:40,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 73 transitions. [2023-11-23 22:41:40,120 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 73 transitions. Word has length 12 [2023-11-23 22:41:40,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:40,121 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 73 transitions. [2023-11-23 22:41:40,121 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,121 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 73 transitions. [2023-11-23 22:41:40,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-23 22:41:40,123 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:40,124 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:40,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 22:41:40,124 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:40,125 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:40,125 INFO L85 PathProgramCache]: Analyzing trace with hash 772100822, now seen corresponding path program 1 times [2023-11-23 22:41:40,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:40,126 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548035339] [2023-11-23 22:41:40,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:40,126 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:40,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:40,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:40,258 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:40,258 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548035339] [2023-11-23 22:41:40,258 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548035339] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:40,258 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:40,259 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 22:41:40,259 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69670423] [2023-11-23 22:41:40,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:40,261 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 22:41:40,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:40,262 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 22:41:40,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:40,262 INFO L87 Difference]: Start difference. First operand 55 states and 73 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:40,300 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2023-11-23 22:41:40,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 22:41:40,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-23 22:41:40,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:40,304 INFO L225 Difference]: With dead ends: 80 [2023-11-23 22:41:40,304 INFO L226 Difference]: Without dead ends: 47 [2023-11-23 22:41:40,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:40,308 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:40,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 88 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 22:41:40,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2023-11-23 22:41:40,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2023-11-23 22:41:40,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 32 states have (on average 1.4375) internal successors, (46), 38 states have internal predecessors, (46), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-23 22:41:40,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 62 transitions. [2023-11-23 22:41:40,320 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 62 transitions. Word has length 13 [2023-11-23 22:41:40,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:40,320 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 62 transitions. [2023-11-23 22:41:40,321 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,321 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 62 transitions. [2023-11-23 22:41:40,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 22:41:40,324 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:40,325 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:40,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 22:41:40,325 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:40,326 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:40,326 INFO L85 PathProgramCache]: Analyzing trace with hash -1456740484, now seen corresponding path program 1 times [2023-11-23 22:41:40,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:40,327 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519775866] [2023-11-23 22:41:40,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:40,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:40,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:40,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:40,483 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:40,483 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519775866] [2023-11-23 22:41:40,483 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1519775866] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:40,483 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:40,484 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 22:41:40,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [322011654] [2023-11-23 22:41:40,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:40,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 22:41:40,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:40,485 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 22:41:40,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:40,490 INFO L87 Difference]: Start difference. First operand 47 states and 62 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:40,563 INFO L93 Difference]: Finished difference Result 137 states and 183 transitions. [2023-11-23 22:41:40,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 22:41:40,566 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-23 22:41:40,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:40,569 INFO L225 Difference]: With dead ends: 137 [2023-11-23 22:41:40,571 INFO L226 Difference]: Without dead ends: 92 [2023-11-23 22:41:40,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:40,573 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 56 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:40,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 107 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 22:41:40,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-23 22:41:40,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 89. [2023-11-23 22:41:40,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 60 states have (on average 1.45) internal successors, (87), 71 states have internal predecessors, (87), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-23 22:41:40,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 119 transitions. [2023-11-23 22:41:40,596 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 119 transitions. Word has length 16 [2023-11-23 22:41:40,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:40,597 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 119 transitions. [2023-11-23 22:41:40,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,597 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 119 transitions. [2023-11-23 22:41:40,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 22:41:40,598 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:40,598 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:40,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 22:41:40,599 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:40,599 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:40,600 INFO L85 PathProgramCache]: Analyzing trace with hash 691118430, now seen corresponding path program 1 times [2023-11-23 22:41:40,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:40,600 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9350568] [2023-11-23 22:41:40,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:40,600 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:40,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:40,776 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:40,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:40,776 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9350568] [2023-11-23 22:41:40,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9350568] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:40,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:40,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 22:41:40,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1626711460] [2023-11-23 22:41:40,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:40,778 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 22:41:40,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:40,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 22:41:40,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 22:41:40,779 INFO L87 Difference]: Start difference. First operand 89 states and 119 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:40,862 INFO L93 Difference]: Finished difference Result 253 states and 350 transitions. [2023-11-23 22:41:40,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 22:41:40,863 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-23 22:41:40,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:40,867 INFO L225 Difference]: With dead ends: 253 [2023-11-23 22:41:40,867 INFO L226 Difference]: Without dead ends: 166 [2023-11-23 22:41:40,868 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 22:41:40,870 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 37 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:40,871 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 146 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 22:41:40,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2023-11-23 22:41:40,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2023-11-23 22:41:40,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 111 states have (on average 1.4144144144144144) internal successors, (157), 130 states have internal predecessors, (157), 32 states have call successors, (32), 24 states have call predecessors, (32), 22 states have return successors, (34), 20 states have call predecessors, (34), 32 states have call successors, (34) [2023-11-23 22:41:40,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 223 transitions. [2023-11-23 22:41:40,903 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 223 transitions. Word has length 19 [2023-11-23 22:41:40,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:40,903 INFO L495 AbstractCegarLoop]: Abstraction has 166 states and 223 transitions. [2023-11-23 22:41:40,904 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:40,904 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 223 transitions. [2023-11-23 22:41:40,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-23 22:41:40,906 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:40,907 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:40,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 22:41:40,907 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:40,908 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:40,908 INFO L85 PathProgramCache]: Analyzing trace with hash -1785270525, now seen corresponding path program 1 times [2023-11-23 22:41:40,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:40,909 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [756532643] [2023-11-23 22:41:40,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:40,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:40,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:40,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:40,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:40,974 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [756532643] [2023-11-23 22:41:40,974 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [756532643] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:40,974 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:40,974 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 22:41:40,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265753949] [2023-11-23 22:41:40,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:40,975 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 22:41:40,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:40,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 22:41:40,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:40,977 INFO L87 Difference]: Start difference. First operand 166 states and 223 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:41,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:41,011 INFO L93 Difference]: Finished difference Result 284 states and 388 transitions. [2023-11-23 22:41:41,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 22:41:41,012 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-23 22:41:41,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:41,014 INFO L225 Difference]: With dead ends: 284 [2023-11-23 22:41:41,014 INFO L226 Difference]: Without dead ends: 120 [2023-11-23 22:41:41,016 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 22:41:41,018 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 30 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:41,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 32 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 22:41:41,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-23 22:41:41,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 118. [2023-11-23 22:41:41,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 87 states have (on average 1.3218390804597702) internal successors, (115), 94 states have internal predecessors, (115), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (16), 14 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-23 22:41:41,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 147 transitions. [2023-11-23 22:41:41,037 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 147 transitions. Word has length 21 [2023-11-23 22:41:41,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:41,038 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 147 transitions. [2023-11-23 22:41:41,038 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:41,038 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 147 transitions. [2023-11-23 22:41:41,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-23 22:41:41,040 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:41,040 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:41,040 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 22:41:41,040 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:41,044 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:41,045 INFO L85 PathProgramCache]: Analyzing trace with hash -1931551656, now seen corresponding path program 1 times [2023-11-23 22:41:41,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:41,045 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714367042] [2023-11-23 22:41:41,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:41,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:41,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 22:41:41,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:41,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:41,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714367042] [2023-11-23 22:41:41,255 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714367042] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 22:41:41,255 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 22:41:41,255 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 22:41:41,255 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862213817] [2023-11-23 22:41:41,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 22:41:41,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-23 22:41:41,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:41,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-23 22:41:41,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-23 22:41:41,258 INFO L87 Difference]: Start difference. First operand 118 states and 147 transitions. Second operand has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 22:41:41,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:41,498 INFO L93 Difference]: Finished difference Result 244 states and 308 transitions. [2023-11-23 22:41:41,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-23 22:41:41,498 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-23 22:41:41,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:41,504 INFO L225 Difference]: With dead ends: 244 [2023-11-23 22:41:41,504 INFO L226 Difference]: Without dead ends: 182 [2023-11-23 22:41:41,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2023-11-23 22:41:41,510 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 94 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:41,513 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 127 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 22:41:41,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-23 22:41:41,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 176. [2023-11-23 22:41:41,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 129 states have (on average 1.302325581395349) internal successors, (168), 142 states have internal predecessors, (168), 22 states have call successors, (22), 22 states have call predecessors, (22), 24 states have return successors, (24), 22 states have call predecessors, (24), 22 states have call successors, (24) [2023-11-23 22:41:41,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 214 transitions. [2023-11-23 22:41:41,548 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 214 transitions. Word has length 23 [2023-11-23 22:41:41,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:41,549 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 214 transitions. [2023-11-23 22:41:41,549 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 22:41:41,549 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 214 transitions. [2023-11-23 22:41:41,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-23 22:41:41,552 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 22:41:41,552 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:41,552 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 22:41:41,552 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 22:41:41,553 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 22:41:41,553 INFO L85 PathProgramCache]: Analyzing trace with hash -882286500, now seen corresponding path program 1 times [2023-11-23 22:41:41,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-23 22:41:41,553 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203103977] [2023-11-23 22:41:41,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:41,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 22:41:41,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-23 22:41:41,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-23 22:41:41,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-23 22:41:41,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,846 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 22:41:41,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-23 22:41:41,846 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203103977] [2023-11-23 22:41:41,846 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203103977] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 22:41:41,847 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [56949868] [2023-11-23 22:41:41,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 22:41:41,848 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 22:41:41,848 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 [2023-11-23 22:41:41,854 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 22:41:41,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 22:41:41,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 22:41:41,958 INFO L262 TraceCheckSpWp]: Trace formula consists of 200 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-23 22:41:41,971 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 22:41:42,134 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 22:41:42,135 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 22:41:42,434 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 22:41:42,434 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [56949868] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 22:41:42,434 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 22:41:42,435 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 7] total 14 [2023-11-23 22:41:42,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [836390103] [2023-11-23 22:41:42,435 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 22:41:42,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-23 22:41:42,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-23 22:41:42,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-23 22:41:42,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2023-11-23 22:41:42,438 INFO L87 Difference]: Start difference. First operand 176 states and 214 transitions. Second operand has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 22:41:42,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 22:41:42,708 INFO L93 Difference]: Finished difference Result 234 states and 287 transitions. [2023-11-23 22:41:42,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-23 22:41:42,709 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 42 [2023-11-23 22:41:42,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 22:41:42,709 INFO L225 Difference]: With dead ends: 234 [2023-11-23 22:41:42,710 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 22:41:42,711 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 78 SyntacticMatches, 4 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=112, Invalid=268, Unknown=0, NotChecked=0, Total=380 [2023-11-23 22:41:42,712 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 194 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 22:41:42,712 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 185 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 22:41:42,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 22:41:42,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 22:41:42,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 22:41:42,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 22:41:42,714 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 42 [2023-11-23 22:41:42,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 22:41:42,714 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 22:41:42,714 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-23 22:41:42,715 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 22:41:42,715 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 22:41:42,718 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 22:41:42,746 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-23 22:41:42,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 22:41:42,948 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 22:41:43,427 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 739 746) no Hoare annotation was computed. [2023-11-23 22:41:43,427 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 746) the Hoare annotation is: true [2023-11-23 22:41:43,428 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L643(line 643) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 668 674) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 705) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 710) no Hoare annotation was computed. [2023-11-23 22:41:43,428 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2023-11-23 22:41:43,429 INFO L899 garLoopResultBuilder]: For program point L466-2(lines 462 473) no Hoare annotation was computed. [2023-11-23 22:41:43,429 INFO L899 garLoopResultBuilder]: For program point L661-1(lines 660 679) no Hoare annotation was computed. [2023-11-23 22:41:43,429 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 657 680) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-23 22:41:43,429 INFO L899 garLoopResultBuilder]: For program point L839(lines 839 845) no Hoare annotation was computed. [2023-11-23 22:41:43,429 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 848) no Hoare annotation was computed. [2023-11-23 22:41:43,430 INFO L899 garLoopResultBuilder]: For program point L835-1(lines 827 851) no Hoare annotation was computed. [2023-11-23 22:41:43,430 INFO L895 garLoopResultBuilder]: At program point L703(line 703) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 22:41:43,430 INFO L895 garLoopResultBuilder]: At program point L699(line 699) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 22:41:43,430 INFO L895 garLoopResultBuilder]: At program point L695(line 695) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 22:41:43,430 INFO L899 garLoopResultBuilder]: For program point L695-1(line 695) no Hoare annotation was computed. [2023-11-23 22:41:43,431 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 657 680) no Hoare annotation was computed. [2023-11-23 22:41:43,431 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 643) no Hoare annotation was computed. [2023-11-23 22:41:43,431 INFO L895 garLoopResultBuilder]: At program point L708(line 708) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-23 22:41:43,431 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 689 713) no Hoare annotation was computed. [2023-11-23 22:41:43,431 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 542 571) no Hoare annotation was computed. [2023-11-23 22:41:43,431 INFO L899 garLoopResultBuilder]: For program point L567(lines 542 571) no Hoare annotation was computed. [2023-11-23 22:41:43,432 INFO L899 garLoopResultBuilder]: For program point L563(line 563) no Hoare annotation was computed. [2023-11-23 22:41:43,432 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 560) no Hoare annotation was computed. [2023-11-23 22:41:43,432 INFO L902 garLoopResultBuilder]: At program point L556-1(lines 556 560) the Hoare annotation is: true [2023-11-23 22:41:43,432 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 542 571) the Hoare annotation is: true [2023-11-23 22:41:43,432 INFO L902 garLoopResultBuilder]: At program point L552-2(lines 552 566) the Hoare annotation is: true [2023-11-23 22:41:43,432 INFO L902 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: true [2023-11-23 22:41:43,432 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2023-11-23 22:41:43,433 INFO L899 garLoopResultBuilder]: For program point L916(lines 853 920) no Hoare annotation was computed. [2023-11-23 22:41:43,433 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-23 22:41:43,433 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-23 22:41:43,433 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 22:41:43,433 INFO L895 garLoopResultBuilder]: At program point L809(line 809) the Hoare annotation is: false [2023-11-23 22:41:43,433 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 22:41:43,433 INFO L895 garLoopResultBuilder]: At program point L913(lines 862 914) the Hoare annotation is: false [2023-11-23 22:41:43,434 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 22:41:43,434 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-23 22:41:43,434 INFO L895 garLoopResultBuilder]: At program point L901-2(lines 893 908) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 22:41:43,434 INFO L899 garLoopResultBuilder]: For program point L864(lines 863 912) no Hoare annotation was computed. [2023-11-23 22:41:43,434 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 908) no Hoare annotation was computed. [2023-11-23 22:41:43,434 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 632) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L625-2(lines 625 632) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L895 garLoopResultBuilder]: At program point L910(lines 863 912) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 873 879) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L807(lines 807 813) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point L807-1(lines 807 813) no Hoare annotation was computed. [2023-11-23 22:41:43,435 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-11-23 22:41:43,436 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2023-11-23 22:41:43,436 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-23 22:41:43,436 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 681 687) no Hoare annotation was computed. [2023-11-23 22:41:43,436 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 681 687) the Hoare annotation is: true [2023-11-23 22:41:43,436 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 747 757) no Hoare annotation was computed. [2023-11-23 22:41:43,436 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 747 757) the Hoare annotation is: true [2023-11-23 22:41:43,443 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-23 22:41:43,445 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 22:41:43,459 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 10:41:43 BoogieIcfgContainer [2023-11-23 22:41:43,459 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 22:41:43,459 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 22:41:43,460 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 22:41:43,460 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 22:41:43,461 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 10:41:39" (3/4) ... [2023-11-23 22:41:43,463 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 22:41:43,467 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 22:41:43,467 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 22:41:43,467 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 22:41:43,468 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 22:41:43,468 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 22:41:43,468 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-23 22:41:43,468 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-23 22:41:43,480 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 31 nodes and edges [2023-11-23 22:41:43,481 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-23 22:41:43,481 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 22:41:43,482 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 22:41:43,483 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 22:41:43,612 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/witness.graphml [2023-11-23 22:41:43,613 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/witness.yml [2023-11-23 22:41:43,613 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 22:41:43,614 INFO L158 Benchmark]: Toolchain (without parser) took 5297.82ms. Allocated memory was 159.4MB in the beginning and 197.1MB in the end (delta: 37.7MB). Free memory was 112.4MB in the beginning and 91.4MB in the end (delta: 21.0MB). Peak memory consumption was 60.0MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,614 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 159.4MB. Free memory is still 131.9MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 22:41:43,614 INFO L158 Benchmark]: CACSL2BoogieTranslator took 570.01ms. Allocated memory is still 159.4MB. Free memory was 112.2MB in the beginning and 93.0MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,615 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.62ms. Allocated memory is still 159.4MB. Free memory was 93.0MB in the beginning and 90.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,615 INFO L158 Benchmark]: Boogie Preprocessor took 60.77ms. Allocated memory is still 159.4MB. Free memory was 90.9MB in the beginning and 88.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,616 INFO L158 Benchmark]: RCFGBuilder took 608.07ms. Allocated memory is still 159.4MB. Free memory was 88.7MB in the beginning and 68.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,616 INFO L158 Benchmark]: TraceAbstraction took 3847.61ms. Allocated memory was 159.4MB in the beginning and 197.1MB in the end (delta: 37.7MB). Free memory was 68.2MB in the beginning and 97.7MB in the end (delta: -29.5MB). Peak memory consumption was 9.7MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,617 INFO L158 Benchmark]: Witness Printer took 153.66ms. Allocated memory is still 197.1MB. Free memory was 97.7MB in the beginning and 91.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 22:41:43,620 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 159.4MB. Free memory is still 131.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 570.01ms. Allocated memory is still 159.4MB. Free memory was 112.2MB in the beginning and 93.0MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.62ms. Allocated memory is still 159.4MB. Free memory was 93.0MB in the beginning and 90.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.77ms. Allocated memory is still 159.4MB. Free memory was 90.9MB in the beginning and 88.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 608.07ms. Allocated memory is still 159.4MB. Free memory was 88.7MB in the beginning and 68.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 3847.61ms. Allocated memory was 159.4MB in the beginning and 197.1MB in the end (delta: 37.7MB). Free memory was 68.2MB in the beginning and 97.7MB in the end (delta: -29.5MB). Peak memory consumption was 9.7MB. Max. memory is 16.1GB. * Witness Printer took 153.66ms. Allocated memory is still 197.1MB. Free memory was 97.7MB in the beginning and 91.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 539]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] - GenericResultAtLocation [Line: 647]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] - GenericResultAtLocation [Line: 826]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] - GenericResultAtLocation [Line: 852]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 643]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 60 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.8s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 434 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 425 mSDsluCounter, 751 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 433 mSDsCounter, 85 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 412 IncrementalHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 85 mSolverCounterUnsat, 318 mSDtfsCounter, 412 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 129 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=176occurred in iteration=6, InterpolantAutomatonStates: 36, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 11 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 212 PreInvPairs, 232 NumberOfFragments, 236 HoareAnnotationTreeSize, 212 FomulaSimplifications, 120 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 599 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 188 NumberOfCodeBlocks, 188 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 221 ConstructedInterpolants, 0 QuantifiedInterpolants, 601 SizeOfPredicates, 0 NumberOfNonLiveVariables, 200 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 30/51 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-23 22:41:43,662 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aeb737e7-6d8a-4248-b322-3feb7611a198/bin/uautomizer-verify-zZY32mL2XJ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE