./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 10:45:19,343 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 10:45:19,489 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 10:45:19,497 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 10:45:19,498 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 10:45:19,537 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 10:45:19,538 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 10:45:19,539 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 10:45:19,541 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 10:45:19,546 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 10:45:19,547 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 10:45:19,547 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 10:45:19,548 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 10:45:19,550 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 10:45:19,551 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 10:45:19,551 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 10:45:19,552 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 10:45:19,552 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 10:45:19,553 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 10:45:19,553 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 10:45:19,554 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 10:45:19,554 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 10:45:19,555 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 10:45:19,555 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 10:45:19,556 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 10:45:19,556 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 10:45:19,557 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 10:45:19,558 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 10:45:19,558 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 10:45:19,559 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 10:45:19,560 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 10:45:19,560 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 10:45:19,561 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 10:45:19,561 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 10:45:19,562 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 10:45:19,562 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 10:45:19,562 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 10:45:19,563 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 10:45:19,563 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 10:45:19,563 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 10:45:19,563 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 10:45:19,564 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 10:45:19,564 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2ec66100f9e2ac4db263cd9becb832e73074b4f7ebe73780c502623dad07d2b6 [2023-11-26 10:45:19,901 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 10:45:19,933 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 10:45:19,936 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 10:45:19,938 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 10:45:19,938 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 10:45:19,940 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-26 10:45:23,035 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 10:45:23,360 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 10:45:23,363 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c [2023-11-26 10:45:23,378 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/data/d2a5b6cb5/546743cd17bd47249fa85312fa49ebc1/FLAGad5082afc [2023-11-26 10:45:23,399 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/data/d2a5b6cb5/546743cd17bd47249fa85312fa49ebc1 [2023-11-26 10:45:23,402 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 10:45:23,404 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 10:45:23,406 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 10:45:23,406 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 10:45:23,412 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 10:45:23,413 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:23,415 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@24c00e66 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23, skipping insertion in model container [2023-11-26 10:45:23,415 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:23,470 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 10:45:23,744 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-26 10:45:23,767 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 10:45:23,792 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 10:45:23,810 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-26 10:45:23,813 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] [2023-11-26 10:45:23,814 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] [2023-11-26 10:45:23,814 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] [2023-11-26 10:45:23,814 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] [2023-11-26 10:45:23,815 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] [2023-11-26 10:45:23,815 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] [2023-11-26 10:45:23,815 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] [2023-11-26 10:45:23,870 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/sv-benchmarks/c/product-lines/minepump_spec4_product16.cil.c[14184,14197] [2023-11-26 10:45:23,882 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 10:45:23,905 INFO L206 MainTranslator]: Completed translation [2023-11-26 10:45:23,906 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23 WrapperNode [2023-11-26 10:45:23,906 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 10:45:23,908 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 10:45:23,908 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 10:45:23,908 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 10:45:23,916 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:23,932 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:23,961 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 166 [2023-11-26 10:45:23,962 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 10:45:23,963 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 10:45:23,963 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 10:45:23,963 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 10:45:23,982 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:23,983 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,003 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,019 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 10:45:24,033 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,034 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,041 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,047 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,048 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,050 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,053 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 10:45:24,054 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 10:45:24,054 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 10:45:24,054 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 10:45:24,055 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (1/1) ... [2023-11-26 10:45:24,062 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 10:45:24,079 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 10:45:24,095 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 10:45:24,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 10:45:24,148 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 10:45:24,149 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 10:45:24,149 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 10:45:24,150 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 10:45:24,150 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 10:45:24,150 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 10:45:24,150 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 10:45:24,150 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 10:45:24,151 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 10:45:24,151 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-26 10:45:24,151 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-26 10:45:24,152 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 10:45:24,153 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 10:45:24,153 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 10:45:24,153 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 10:45:24,153 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 10:45:24,155 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 10:45:24,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 10:45:24,293 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 10:45:24,295 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 10:45:24,536 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 10:45:24,641 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 10:45:24,641 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 10:45:24,642 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 10:45:24 BoogieIcfgContainer [2023-11-26 10:45:24,642 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 10:45:24,645 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 10:45:24,645 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 10:45:24,649 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 10:45:24,649 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 10:45:23" (1/3) ... [2023-11-26 10:45:24,650 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@619e1659 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 10:45:24, skipping insertion in model container [2023-11-26 10:45:24,650 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 10:45:23" (2/3) ... [2023-11-26 10:45:24,651 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@619e1659 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 10:45:24, skipping insertion in model container [2023-11-26 10:45:24,651 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 10:45:24" (3/3) ... [2023-11-26 10:45:24,652 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product16.cil.c [2023-11-26 10:45:24,674 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 10:45:24,675 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 10:45:24,745 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 10:45:24,753 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39f12868, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 10:45:24,754 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 10:45:24,758 INFO L276 IsEmpty]: Start isEmpty. Operand has 60 states, 40 states have (on average 1.55) internal successors, (62), 47 states have internal predecessors, (62), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-26 10:45:24,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-26 10:45:24,769 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:24,770 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:24,771 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:24,780 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:24,780 INFO L85 PathProgramCache]: Analyzing trace with hash 1280737313, now seen corresponding path program 1 times [2023-11-26 10:45:24,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:24,792 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436639050] [2023-11-26 10:45:24,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:24,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:24,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:25,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:25,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:25,043 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436639050] [2023-11-26 10:45:25,044 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436639050] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:25,044 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:25,044 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 10:45:25,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881845135] [2023-11-26 10:45:25,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:25,054 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 10:45:25,055 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:25,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 10:45:25,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 10:45:25,096 INFO L87 Difference]: Start difference. First operand has 60 states, 40 states have (on average 1.55) internal successors, (62), 47 states have internal predecessors, (62), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:25,163 INFO L93 Difference]: Finished difference Result 118 states and 169 transitions. [2023-11-26 10:45:25,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 10:45:25,165 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-26 10:45:25,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:25,174 INFO L225 Difference]: With dead ends: 118 [2023-11-26 10:45:25,174 INFO L226 Difference]: Without dead ends: 55 [2023-11-26 10:45:25,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 10:45:25,182 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:25,183 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 66 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 10:45:25,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2023-11-26 10:45:25,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2023-11-26 10:45:25,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 37 states have (on average 1.4054054054054055) internal successors, (52), 43 states have internal predecessors, (52), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-26 10:45:25,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 73 transitions. [2023-11-26 10:45:25,228 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 73 transitions. Word has length 12 [2023-11-26 10:45:25,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:25,229 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 73 transitions. [2023-11-26 10:45:25,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,229 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 73 transitions. [2023-11-26 10:45:25,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-26 10:45:25,231 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:25,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:25,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 10:45:25,232 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:25,233 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:25,233 INFO L85 PathProgramCache]: Analyzing trace with hash 772100822, now seen corresponding path program 1 times [2023-11-26 10:45:25,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:25,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [830840721] [2023-11-26 10:45:25,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:25,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:25,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:25,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:25,384 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:25,384 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [830840721] [2023-11-26 10:45:25,385 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [830840721] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:25,385 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:25,385 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 10:45:25,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1841808643] [2023-11-26 10:45:25,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:25,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 10:45:25,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:25,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 10:45:25,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:25,389 INFO L87 Difference]: Start difference. First operand 55 states and 73 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:25,421 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2023-11-26 10:45:25,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 10:45:25,422 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-26 10:45:25,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:25,423 INFO L225 Difference]: With dead ends: 80 [2023-11-26 10:45:25,423 INFO L226 Difference]: Without dead ends: 47 [2023-11-26 10:45:25,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:25,426 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 14 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:25,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 88 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 10:45:25,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2023-11-26 10:45:25,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2023-11-26 10:45:25,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 32 states have (on average 1.4375) internal successors, (46), 38 states have internal predecessors, (46), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-26 10:45:25,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 62 transitions. [2023-11-26 10:45:25,436 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 62 transitions. Word has length 13 [2023-11-26 10:45:25,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:25,436 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 62 transitions. [2023-11-26 10:45:25,437 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,437 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 62 transitions. [2023-11-26 10:45:25,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-26 10:45:25,438 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:25,438 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:25,438 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 10:45:25,439 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:25,439 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:25,439 INFO L85 PathProgramCache]: Analyzing trace with hash -1456740484, now seen corresponding path program 1 times [2023-11-26 10:45:25,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:25,440 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [540736345] [2023-11-26 10:45:25,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:25,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:25,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:25,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:25,517 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:25,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [540736345] [2023-11-26 10:45:25,517 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [540736345] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:25,518 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:25,518 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 10:45:25,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2135344097] [2023-11-26 10:45:25,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:25,519 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 10:45:25,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:25,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 10:45:25,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:25,520 INFO L87 Difference]: Start difference. First operand 47 states and 62 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:25,574 INFO L93 Difference]: Finished difference Result 137 states and 183 transitions. [2023-11-26 10:45:25,574 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 10:45:25,575 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-26 10:45:25,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:25,577 INFO L225 Difference]: With dead ends: 137 [2023-11-26 10:45:25,577 INFO L226 Difference]: Without dead ends: 92 [2023-11-26 10:45:25,578 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:25,580 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 56 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:25,580 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 107 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 10:45:25,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2023-11-26 10:45:25,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 89. [2023-11-26 10:45:25,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 60 states have (on average 1.45) internal successors, (87), 71 states have internal predecessors, (87), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-26 10:45:25,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 119 transitions. [2023-11-26 10:45:25,602 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 119 transitions. Word has length 16 [2023-11-26 10:45:25,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:25,603 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 119 transitions. [2023-11-26 10:45:25,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,604 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 119 transitions. [2023-11-26 10:45:25,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-26 10:45:25,605 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:25,605 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:25,606 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 10:45:25,606 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:25,607 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:25,607 INFO L85 PathProgramCache]: Analyzing trace with hash 691118430, now seen corresponding path program 1 times [2023-11-26 10:45:25,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:25,607 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226151150] [2023-11-26 10:45:25,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:25,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:25,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:25,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:25,813 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:25,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226151150] [2023-11-26 10:45:25,814 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226151150] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:25,814 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:25,814 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 10:45:25,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035916260] [2023-11-26 10:45:25,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:25,816 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 10:45:25,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:25,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 10:45:25,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 10:45:25,818 INFO L87 Difference]: Start difference. First operand 89 states and 119 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:25,920 INFO L93 Difference]: Finished difference Result 253 states and 350 transitions. [2023-11-26 10:45:25,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-26 10:45:25,920 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-26 10:45:25,921 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:25,925 INFO L225 Difference]: With dead ends: 253 [2023-11-26 10:45:25,925 INFO L226 Difference]: Without dead ends: 166 [2023-11-26 10:45:25,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 10:45:25,929 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 37 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:25,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 146 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 10:45:25,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2023-11-26 10:45:25,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2023-11-26 10:45:25,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 111 states have (on average 1.4144144144144144) internal successors, (157), 130 states have internal predecessors, (157), 32 states have call successors, (32), 24 states have call predecessors, (32), 22 states have return successors, (34), 20 states have call predecessors, (34), 32 states have call successors, (34) [2023-11-26 10:45:25,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 223 transitions. [2023-11-26 10:45:25,968 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 223 transitions. Word has length 19 [2023-11-26 10:45:25,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:25,968 INFO L495 AbstractCegarLoop]: Abstraction has 166 states and 223 transitions. [2023-11-26 10:45:25,969 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:25,969 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 223 transitions. [2023-11-26 10:45:25,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-26 10:45:25,972 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:25,972 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:25,972 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 10:45:25,973 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:25,973 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:25,974 INFO L85 PathProgramCache]: Analyzing trace with hash -1785270525, now seen corresponding path program 1 times [2023-11-26 10:45:25,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:25,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510748838] [2023-11-26 10:45:25,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:25,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:25,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:26,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:26,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:26,055 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510748838] [2023-11-26 10:45:26,056 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510748838] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:26,056 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:26,063 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 10:45:26,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [244803084] [2023-11-26 10:45:26,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:26,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 10:45:26,066 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:26,067 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 10:45:26,067 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:26,068 INFO L87 Difference]: Start difference. First operand 166 states and 223 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:26,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:26,150 INFO L93 Difference]: Finished difference Result 284 states and 388 transitions. [2023-11-26 10:45:26,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 10:45:26,151 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-26 10:45:26,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:26,153 INFO L225 Difference]: With dead ends: 284 [2023-11-26 10:45:26,154 INFO L226 Difference]: Without dead ends: 120 [2023-11-26 10:45:26,156 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 10:45:26,158 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 30 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:26,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 32 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 10:45:26,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-26 10:45:26,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 118. [2023-11-26 10:45:26,178 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 87 states have (on average 1.3218390804597702) internal successors, (115), 94 states have internal predecessors, (115), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (16), 14 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-26 10:45:26,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 147 transitions. [2023-11-26 10:45:26,180 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 147 transitions. Word has length 21 [2023-11-26 10:45:26,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:26,181 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 147 transitions. [2023-11-26 10:45:26,181 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:26,182 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 147 transitions. [2023-11-26 10:45:26,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-26 10:45:26,183 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:26,183 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:26,184 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 10:45:26,184 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:26,184 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:26,185 INFO L85 PathProgramCache]: Analyzing trace with hash -1931551656, now seen corresponding path program 1 times [2023-11-26 10:45:26,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:26,185 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1840173360] [2023-11-26 10:45:26,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:26,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:26,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:26,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 10:45:26,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:26,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:26,365 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:26,365 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1840173360] [2023-11-26 10:45:26,365 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1840173360] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 10:45:26,366 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 10:45:26,366 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 10:45:26,366 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560953521] [2023-11-26 10:45:26,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 10:45:26,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-26 10:45:26,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:26,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-26 10:45:26,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-26 10:45:26,369 INFO L87 Difference]: Start difference. First operand 118 states and 147 transitions. Second operand has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 10:45:26,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:26,619 INFO L93 Difference]: Finished difference Result 244 states and 308 transitions. [2023-11-26 10:45:26,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-26 10:45:26,620 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-26 10:45:26,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:26,623 INFO L225 Difference]: With dead ends: 244 [2023-11-26 10:45:26,623 INFO L226 Difference]: Without dead ends: 182 [2023-11-26 10:45:26,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2023-11-26 10:45:26,626 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 94 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:26,627 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 127 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 10:45:26,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2023-11-26 10:45:26,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 176. [2023-11-26 10:45:26,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 129 states have (on average 1.302325581395349) internal successors, (168), 142 states have internal predecessors, (168), 22 states have call successors, (22), 22 states have call predecessors, (22), 24 states have return successors, (24), 22 states have call predecessors, (24), 22 states have call successors, (24) [2023-11-26 10:45:26,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 214 transitions. [2023-11-26 10:45:26,661 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 214 transitions. Word has length 23 [2023-11-26 10:45:26,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:26,661 INFO L495 AbstractCegarLoop]: Abstraction has 176 states and 214 transitions. [2023-11-26 10:45:26,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.857142857142857) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 10:45:26,662 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 214 transitions. [2023-11-26 10:45:26,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2023-11-26 10:45:26,664 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 10:45:26,664 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:26,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 10:45:26,665 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 10:45:26,665 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 10:45:26,666 INFO L85 PathProgramCache]: Analyzing trace with hash -882286500, now seen corresponding path program 1 times [2023-11-26 10:45:26,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 10:45:26,666 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171914031] [2023-11-26 10:45:26,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:26,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 10:45:26,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:27,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 10:45:27,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:27,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 10:45:27,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:27,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-26 10:45:27,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:27,130 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 10:45:27,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 10:45:27,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171914031] [2023-11-26 10:45:27,131 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171914031] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 10:45:27,131 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1753363371] [2023-11-26 10:45:27,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 10:45:27,132 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 10:45:27,132 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 10:45:27,137 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 10:45:27,155 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 10:45:27,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 10:45:27,252 INFO L262 TraceCheckSpWp]: Trace formula consists of 200 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-26 10:45:27,261 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 10:45:27,429 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 10:45:27,429 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-26 10:45:27,791 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 10:45:27,792 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1753363371] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-26 10:45:27,792 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-26 10:45:27,792 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 7] total 14 [2023-11-26 10:45:27,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [713735909] [2023-11-26 10:45:27,798 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-26 10:45:27,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-26 10:45:27,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 10:45:27,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-26 10:45:27,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2023-11-26 10:45:27,803 INFO L87 Difference]: Start difference. First operand 176 states and 214 transitions. Second operand has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-26 10:45:28,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 10:45:28,171 INFO L93 Difference]: Finished difference Result 234 states and 287 transitions. [2023-11-26 10:45:28,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-26 10:45:28,172 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 42 [2023-11-26 10:45:28,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 10:45:28,173 INFO L225 Difference]: With dead ends: 234 [2023-11-26 10:45:28,173 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 10:45:28,175 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 78 SyntacticMatches, 4 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=112, Invalid=268, Unknown=0, NotChecked=0, Total=380 [2023-11-26 10:45:28,176 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 194 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 10:45:28,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 185 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 10:45:28,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 10:45:28,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 10:45:28,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 10:45:28,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 10:45:28,180 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 42 [2023-11-26 10:45:28,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 10:45:28,181 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 10:45:28,181 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.266666666666667) internal successors, (64), 12 states have internal predecessors, (64), 5 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-26 10:45:28,181 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 10:45:28,181 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 10:45:28,184 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 10:45:28,192 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-11-26 10:45:28,392 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 10:45:28,394 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 10:45:28,980 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 739 746) no Hoare annotation was computed. [2023-11-26 10:45:28,980 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 746) the Hoare annotation is: true [2023-11-26 10:45:28,981 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 486 497) the Hoare annotation is: true [2023-11-26 10:45:28,981 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2023-11-26 10:45:28,981 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2023-11-26 10:45:28,981 INFO L899 garLoopResultBuilder]: For program point L643(line 643) no Hoare annotation was computed. [2023-11-26 10:45:28,981 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 668 674) no Hoare annotation was computed. [2023-11-26 10:45:28,981 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 705) no Hoare annotation was computed. [2023-11-26 10:45:28,982 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 710) no Hoare annotation was computed. [2023-11-26 10:45:28,982 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2023-11-26 10:45:28,982 INFO L899 garLoopResultBuilder]: For program point L466-2(lines 462 473) no Hoare annotation was computed. [2023-11-26 10:45:28,982 INFO L899 garLoopResultBuilder]: For program point L661-1(lines 660 679) no Hoare annotation was computed. [2023-11-26 10:45:28,982 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 657 680) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-26 10:45:28,983 INFO L899 garLoopResultBuilder]: For program point L839(lines 839 845) no Hoare annotation was computed. [2023-11-26 10:45:28,983 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 848) no Hoare annotation was computed. [2023-11-26 10:45:28,983 INFO L899 garLoopResultBuilder]: For program point L835-1(lines 827 851) no Hoare annotation was computed. [2023-11-26 10:45:28,983 INFO L895 garLoopResultBuilder]: At program point L703(line 703) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-26 10:45:28,984 INFO L895 garLoopResultBuilder]: At program point L699(line 699) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-26 10:45:28,984 INFO L895 garLoopResultBuilder]: At program point L695(line 695) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-26 10:45:28,984 INFO L899 garLoopResultBuilder]: For program point L695-1(line 695) no Hoare annotation was computed. [2023-11-26 10:45:28,984 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 657 680) no Hoare annotation was computed. [2023-11-26 10:45:28,984 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 643) no Hoare annotation was computed. [2023-11-26 10:45:28,985 INFO L895 garLoopResultBuilder]: At program point L708(line 708) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-26 10:45:28,985 INFO L899 garLoopResultBuilder]: For program point L708-1(lines 689 713) no Hoare annotation was computed. [2023-11-26 10:45:28,985 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 542 571) no Hoare annotation was computed. [2023-11-26 10:45:28,985 INFO L899 garLoopResultBuilder]: For program point L567(lines 542 571) no Hoare annotation was computed. [2023-11-26 10:45:28,985 INFO L899 garLoopResultBuilder]: For program point L563(line 563) no Hoare annotation was computed. [2023-11-26 10:45:28,986 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 560) no Hoare annotation was computed. [2023-11-26 10:45:28,986 INFO L902 garLoopResultBuilder]: At program point L556-1(lines 556 560) the Hoare annotation is: true [2023-11-26 10:45:28,986 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 542 571) the Hoare annotation is: true [2023-11-26 10:45:28,986 INFO L902 garLoopResultBuilder]: At program point L552-2(lines 552 566) the Hoare annotation is: true [2023-11-26 10:45:28,986 INFO L902 garLoopResultBuilder]: At program point L548(line 548) the Hoare annotation is: true [2023-11-26 10:45:28,986 INFO L899 garLoopResultBuilder]: For program point L548-1(line 548) no Hoare annotation was computed. [2023-11-26 10:45:28,987 INFO L899 garLoopResultBuilder]: For program point L916(lines 853 920) no Hoare annotation was computed. [2023-11-26 10:45:28,987 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-26 10:45:28,987 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-26 10:45:28,987 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-26 10:45:28,987 INFO L895 garLoopResultBuilder]: At program point L809(line 809) the Hoare annotation is: false [2023-11-26 10:45:28,988 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 10:45:28,988 INFO L895 garLoopResultBuilder]: At program point L913(lines 862 914) the Hoare annotation is: false [2023-11-26 10:45:28,988 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 10:45:28,988 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-26 10:45:28,988 INFO L895 garLoopResultBuilder]: At program point L901-2(lines 893 908) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-26 10:45:28,988 INFO L899 garLoopResultBuilder]: For program point L864(lines 863 912) no Hoare annotation was computed. [2023-11-26 10:45:28,989 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 908) no Hoare annotation was computed. [2023-11-26 10:45:28,989 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-26 10:45:28,989 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 632) no Hoare annotation was computed. [2023-11-26 10:45:28,989 INFO L899 garLoopResultBuilder]: For program point L625-2(lines 625 632) no Hoare annotation was computed. [2023-11-26 10:45:28,989 INFO L895 garLoopResultBuilder]: At program point L910(lines 863 912) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 873 879) no Hoare annotation was computed. [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point L807(lines 807 813) no Hoare annotation was computed. [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point L807-1(lines 807 813) no Hoare annotation was computed. [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2023-11-26 10:45:28,990 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2023-11-26 10:45:28,991 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 474 485) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-26 10:45:28,991 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 681 687) no Hoare annotation was computed. [2023-11-26 10:45:28,991 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 681 687) the Hoare annotation is: true [2023-11-26 10:45:28,991 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 747 757) no Hoare annotation was computed. [2023-11-26 10:45:28,991 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 747 757) the Hoare annotation is: true [2023-11-26 10:45:29,001 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-26 10:45:29,003 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 10:45:29,020 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 10:45:29 BoogieIcfgContainer [2023-11-26 10:45:29,020 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 10:45:29,021 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 10:45:29,021 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 10:45:29,021 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 10:45:29,022 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 10:45:24" (3/4) ... [2023-11-26 10:45:29,024 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 10:45:29,028 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 10:45:29,028 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 10:45:29,028 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 10:45:29,028 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 10:45:29,029 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 10:45:29,029 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-26 10:45:29,029 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-26 10:45:29,040 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 31 nodes and edges [2023-11-26 10:45:29,041 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 10:45:29,041 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 10:45:29,042 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 10:45:29,043 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 10:45:29,191 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 10:45:29,192 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 10:45:29,192 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 10:45:29,193 INFO L158 Benchmark]: Toolchain (without parser) took 5788.70ms. Allocated memory was 159.4MB in the beginning and 207.6MB in the end (delta: 48.2MB). Free memory was 128.3MB in the beginning and 173.4MB in the end (delta: -45.1MB). Peak memory consumption was 98.5MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,193 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 121.6MB. Free memory is still 81.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 10:45:29,193 INFO L158 Benchmark]: CACSL2BoogieTranslator took 500.99ms. Allocated memory is still 159.4MB. Free memory was 128.3MB in the beginning and 109.3MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,194 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.55ms. Allocated memory is still 159.4MB. Free memory was 109.3MB in the beginning and 107.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,194 INFO L158 Benchmark]: Boogie Preprocessor took 90.03ms. Allocated memory is still 159.4MB. Free memory was 107.0MB in the beginning and 104.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,195 INFO L158 Benchmark]: RCFGBuilder took 588.31ms. Allocated memory is still 159.4MB. Free memory was 104.9MB in the beginning and 85.4MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,195 INFO L158 Benchmark]: TraceAbstraction took 4375.22ms. Allocated memory was 159.4MB in the beginning and 207.6MB in the end (delta: 48.2MB). Free memory was 84.6MB in the beginning and 84.0MB in the end (delta: 629.9kB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,196 INFO L158 Benchmark]: Witness Printer took 171.38ms. Allocated memory is still 207.6MB. Free memory was 83.0MB in the beginning and 173.4MB in the end (delta: -90.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-26 10:45:29,199 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 121.6MB. Free memory is still 81.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 500.99ms. Allocated memory is still 159.4MB. Free memory was 128.3MB in the beginning and 109.3MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.55ms. Allocated memory is still 159.4MB. Free memory was 109.3MB in the beginning and 107.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 90.03ms. Allocated memory is still 159.4MB. Free memory was 107.0MB in the beginning and 104.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 588.31ms. Allocated memory is still 159.4MB. Free memory was 104.9MB in the beginning and 85.4MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 4375.22ms. Allocated memory was 159.4MB in the beginning and 207.6MB in the end (delta: 48.2MB). Free memory was 84.6MB in the beginning and 84.0MB in the end (delta: 629.9kB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. * Witness Printer took 171.38ms. Allocated memory is still 207.6MB. Free memory was 83.0MB in the beginning and 173.4MB in the end (delta: -90.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87] - GenericResultAtLocation [Line: 453]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [453] - GenericResultAtLocation [Line: 539]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [539] - GenericResultAtLocation [Line: 638]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [638] - GenericResultAtLocation [Line: 647]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [647] - GenericResultAtLocation [Line: 826]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [826] - GenericResultAtLocation [Line: 852]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 643]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 60 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.3s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 434 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 425 mSDsluCounter, 751 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 433 mSDsCounter, 85 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 412 IncrementalHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 85 mSolverCounterUnsat, 318 mSDtfsCounter, 412 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 129 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=176occurred in iteration=6, InterpolantAutomatonStates: 36, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 11 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 212 PreInvPairs, 232 NumberOfFragments, 236 HoareAnnotationTreeSize, 212 FomulaSimplifications, 120 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 599 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 188 NumberOfCodeBlocks, 188 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 221 ConstructedInterpolants, 0 QuantifiedInterpolants, 601 SizeOfPredicates, 0 NumberOfNonLiveVariables, 200 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 30/51 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-26 10:45:29,237 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3c990270-b4e0-4fc1-9ffd-0d6cc428b0e1/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE