./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 27746ab44f558a6ebb6981088914ebe56dec54e6e61aba8484d841196c9545ea --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:58:29,354 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:58:29,428 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:58:29,434 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:58:29,435 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:58:29,476 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:58:29,482 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:58:29,483 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:58:29,484 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:58:29,490 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:58:29,490 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:58:29,491 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:58:29,492 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:58:29,494 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:58:29,494 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:58:29,495 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:58:29,495 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:58:29,496 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:58:29,498 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:58:29,498 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:58:29,499 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:58:29,499 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:58:29,500 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:58:29,500 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:58:29,501 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:58:29,501 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:58:29,501 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:58:29,502 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:58:29,503 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:58:29,503 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:58:29,505 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:58:29,505 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:58:29,505 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:58:29,505 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:58:29,506 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:58:29,506 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:58:29,506 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:58:29,507 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:58:29,507 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:58:29,508 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:58:29,508 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:58:29,509 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:58:29,509 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 27746ab44f558a6ebb6981088914ebe56dec54e6e61aba8484d841196c9545ea [2023-11-26 11:58:29,791 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:58:29,833 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:58:29,836 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:58:29,837 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:58:29,838 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:58:29,839 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c [2023-11-26 11:58:33,008 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:58:33,326 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:58:33,326 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c [2023-11-26 11:58:33,345 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/data/f7ae48fcf/a2bc19387deb47cba638223b2752bcb6/FLAGe39960849 [2023-11-26 11:58:33,367 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/data/f7ae48fcf/a2bc19387deb47cba638223b2752bcb6 [2023-11-26 11:58:33,374 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:58:33,378 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:58:33,382 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:58:33,382 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:58:33,388 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:58:33,389 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:58:33" (1/1) ... [2023-11-26 11:58:33,391 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@795f90dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:33, skipping insertion in model container [2023-11-26 11:58:33,397 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:58:33" (1/1) ... [2023-11-26 11:58:33,472 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:58:33,893 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c[15131,15144] [2023-11-26 11:58:33,938 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:58:33,954 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:58:33,968 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-26 11:58:33,970 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [145] [2023-11-26 11:58:33,971 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [196] [2023-11-26 11:58:33,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [299] [2023-11-26 11:58:33,972 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [665] [2023-11-26 11:58:33,973 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [700] [2023-11-26 11:58:33,973 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [709] [2023-11-26 11:58:33,973 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [909] [2023-11-26 11:58:34,087 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/sv-benchmarks/c/product-lines/minepump_spec5_product28.cil.c[15131,15144] [2023-11-26 11:58:34,105 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:58:34,138 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:58:34,138 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34 WrapperNode [2023-11-26 11:58:34,139 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:58:34,140 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:58:34,140 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:58:34,140 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:58:34,148 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,163 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,203 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 25, calls inlined = 19, statements flattened = 177 [2023-11-26 11:58:34,203 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:58:34,205 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:58:34,205 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:58:34,205 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:58:34,217 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,217 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,220 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,235 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:58:34,236 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,236 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,243 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,253 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,255 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,261 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,263 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:58:34,264 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:58:34,264 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:58:34,264 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:58:34,265 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (1/1) ... [2023-11-26 11:58:34,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:58:34,289 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:58:34,304 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:58:34,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:58:34,367 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:58:34,367 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:58:34,367 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:58:34,367 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:58:34,367 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:58:34,368 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:58:34,368 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:58:34,368 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:58:34,368 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:58:34,368 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-26 11:58:34,368 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-26 11:58:34,369 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:58:34,369 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:58:34,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:58:34,369 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:58:34,369 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:58:34,369 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:58:34,370 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:58:34,453 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:58:34,456 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:58:34,793 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:58:34,880 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:58:34,888 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:58:34,893 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:34 BoogieIcfgContainer [2023-11-26 11:58:34,893 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:58:34,896 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:58:34,896 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:58:34,899 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:58:34,900 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:58:33" (1/3) ... [2023-11-26 11:58:34,900 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36febe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:58:34, skipping insertion in model container [2023-11-26 11:58:34,901 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:58:34" (2/3) ... [2023-11-26 11:58:34,901 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36febe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:58:34, skipping insertion in model container [2023-11-26 11:58:34,901 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:34" (3/3) ... [2023-11-26 11:58:34,903 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product28.cil.c [2023-11-26 11:58:34,933 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:58:34,934 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:58:34,993 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:58:34,999 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7e3a4d80, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:58:35,000 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:58:35,004 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 45 states have (on average 1.5333333333333334) internal successors, (69), 52 states have internal predecessors, (69), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-26 11:58:35,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-26 11:58:35,016 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:35,017 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:35,018 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:35,023 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:35,023 INFO L85 PathProgramCache]: Analyzing trace with hash -1499675859, now seen corresponding path program 1 times [2023-11-26 11:58:35,034 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:35,035 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1387136608] [2023-11-26 11:58:35,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:35,036 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:35,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:58:35,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 11:58:35,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,247 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:35,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:35,249 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1387136608] [2023-11-26 11:58:35,249 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1387136608] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:35,250 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:35,250 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:58:35,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980821247] [2023-11-26 11:58:35,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:35,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:58:35,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:35,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:58:35,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:58:35,295 INFO L87 Difference]: Start difference. First operand has 66 states, 45 states have (on average 1.5333333333333334) internal successors, (69), 52 states have internal predecessors, (69), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:35,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:35,370 INFO L93 Difference]: Finished difference Result 130 states and 187 transitions. [2023-11-26 11:58:35,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:58:35,372 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-26 11:58:35,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:35,385 INFO L225 Difference]: With dead ends: 130 [2023-11-26 11:58:35,387 INFO L226 Difference]: Without dead ends: 61 [2023-11-26 11:58:35,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:58:35,402 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:35,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 73 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:58:35,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-26 11:58:35,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-26 11:58:35,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 42 states have (on average 1.4047619047619047) internal successors, (59), 48 states have internal predecessors, (59), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-26 11:58:35,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 82 transitions. [2023-11-26 11:58:35,452 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 82 transitions. Word has length 22 [2023-11-26 11:58:35,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:35,452 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 82 transitions. [2023-11-26 11:58:35,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:35,453 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 82 transitions. [2023-11-26 11:58:35,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-26 11:58:35,459 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:35,460 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:35,460 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:58:35,460 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:35,463 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:35,464 INFO L85 PathProgramCache]: Analyzing trace with hash 1173959567, now seen corresponding path program 1 times [2023-11-26 11:58:35,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:35,465 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607450895] [2023-11-26 11:58:35,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:35,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:35,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 11:58:35,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:58:35,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,683 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:35,683 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:35,683 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607450895] [2023-11-26 11:58:35,683 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607450895] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:35,683 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:35,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:58:35,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235709262] [2023-11-26 11:58:35,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:35,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:58:35,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:35,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:58:35,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:35,686 INFO L87 Difference]: Start difference. First operand 61 states and 82 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:35,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:35,735 INFO L93 Difference]: Finished difference Result 92 states and 122 transitions. [2023-11-26 11:58:35,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:58:35,735 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-26 11:58:35,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:35,737 INFO L225 Difference]: With dead ends: 92 [2023-11-26 11:58:35,737 INFO L226 Difference]: Without dead ends: 53 [2023-11-26 11:58:35,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:35,740 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 14 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:35,741 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 102 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:58:35,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-26 11:58:35,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-26 11:58:35,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 37 states have (on average 1.4324324324324325) internal successors, (53), 43 states have internal predecessors, (53), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-26 11:58:35,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 71 transitions. [2023-11-26 11:58:35,751 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 71 transitions. Word has length 23 [2023-11-26 11:58:35,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:35,752 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 71 transitions. [2023-11-26 11:58:35,752 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:35,752 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 71 transitions. [2023-11-26 11:58:35,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-26 11:58:35,754 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:35,754 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:35,754 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:58:35,755 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:35,755 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:35,755 INFO L85 PathProgramCache]: Analyzing trace with hash -1510206907, now seen corresponding path program 1 times [2023-11-26 11:58:35,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:35,756 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2055557844] [2023-11-26 11:58:35,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:35,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:35,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:58:35,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-26 11:58:35,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:35,903 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:58:35,903 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:35,904 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2055557844] [2023-11-26 11:58:35,904 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2055557844] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:35,904 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:35,904 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:58:35,905 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514522046] [2023-11-26 11:58:35,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:35,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:58:35,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:35,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:58:35,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:35,910 INFO L87 Difference]: Start difference. First operand 53 states and 71 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 11:58:36,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:36,022 INFO L93 Difference]: Finished difference Result 155 states and 210 transitions. [2023-11-26 11:58:36,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:58:36,023 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-26 11:58:36,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:36,025 INFO L225 Difference]: With dead ends: 155 [2023-11-26 11:58:36,025 INFO L226 Difference]: Without dead ends: 104 [2023-11-26 11:58:36,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:58:36,028 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 62 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:36,029 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 127 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:58:36,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-26 11:58:36,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2023-11-26 11:58:36,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 81 states have internal predecessors, (101), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-26 11:58:36,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 137 transitions. [2023-11-26 11:58:36,050 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 137 transitions. Word has length 26 [2023-11-26 11:58:36,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:36,051 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 137 transitions. [2023-11-26 11:58:36,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 11:58:36,052 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 137 transitions. [2023-11-26 11:58:36,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-26 11:58:36,054 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:58:36,054 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:58:36,054 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:58:36,054 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:58:36,055 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:58:36,055 INFO L85 PathProgramCache]: Analyzing trace with hash 1263595562, now seen corresponding path program 1 times [2023-11-26 11:58:36,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:58:36,056 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1665331762] [2023-11-26 11:58:36,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:58:36,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:58:36,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:36,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-26 11:58:36,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:36,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-26 11:58:36,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:58:36,248 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 11:58:36,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:58:36,248 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1665331762] [2023-11-26 11:58:36,249 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1665331762] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:58:36,249 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:58:36,249 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:58:36,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580064591] [2023-11-26 11:58:36,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:58:36,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:58:36,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:58:36,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:58:36,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:58:36,251 INFO L87 Difference]: Start difference. First operand 101 states and 137 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:36,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:58:36,387 INFO L93 Difference]: Finished difference Result 178 states and 241 transitions. [2023-11-26 11:58:36,387 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-26 11:58:36,389 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2023-11-26 11:58:36,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:58:36,390 INFO L225 Difference]: With dead ends: 178 [2023-11-26 11:58:36,390 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:58:36,393 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-26 11:58:36,398 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 29 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:58:36,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 127 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:58:36,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:58:36,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:58:36,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:58:36,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:58:36,405 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 29 [2023-11-26 11:58:36,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:58:36,406 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:58:36,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:58:36,406 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:58:36,406 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:58:36,409 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:58:36,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:58:36,412 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:58:36,583 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 803 810) no Hoare annotation was computed. [2023-11-26 11:58:36,584 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 803 810) the Hoare annotation is: true [2023-11-26 11:58:36,585 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 744 750) no Hoare annotation was computed. [2023-11-26 11:58:36,585 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 744 750) the Hoare annotation is: true [2023-11-26 11:58:36,585 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: true [2023-11-26 11:58:36,586 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-26 11:58:36,586 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-26 11:58:36,586 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-26 11:58:36,586 INFO L895 garLoopResultBuilder]: At program point L762(line 762) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-26 11:58:36,587 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2023-11-26 11:58:36,588 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:58:36,589 INFO L899 garLoopResultBuilder]: For program point L771-1(lines 752 776) no Hoare annotation was computed. [2023-11-26 11:58:36,590 INFO L899 garLoopResultBuilder]: For program point L705(line 705) no Hoare annotation was computed. [2023-11-26 11:58:36,591 INFO L895 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:58:36,591 INFO L899 garLoopResultBuilder]: For program point L177-1(line 177) no Hoare annotation was computed. [2023-11-26 11:58:36,591 INFO L899 garLoopResultBuilder]: For program point L731-1(lines 731 737) no Hoare annotation was computed. [2023-11-26 11:58:36,591 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 768) no Hoare annotation was computed. [2023-11-26 11:58:36,593 INFO L899 garLoopResultBuilder]: For program point L756(lines 756 773) no Hoare annotation was computed. [2023-11-26 11:58:36,593 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2023-11-26 11:58:36,593 INFO L899 garLoopResultBuilder]: For program point L876-2(lines 876 880) no Hoare annotation was computed. [2023-11-26 11:58:36,594 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 717 743) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:58:36,594 INFO L895 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:58:36,594 INFO L899 garLoopResultBuilder]: For program point L162-1(line 162) no Hoare annotation was computed. [2023-11-26 11:58:36,594 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-26 11:58:36,595 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-26 11:58:36,595 INFO L899 garLoopResultBuilder]: For program point L724(lines 724 730) no Hoare annotation was computed. [2023-11-26 11:58:36,595 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 189) no Hoare annotation was computed. [2023-11-26 11:58:36,595 INFO L899 garLoopResultBuilder]: For program point L724-2(lines 720 742) no Hoare annotation was computed. [2023-11-26 11:58:36,596 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 192) no Hoare annotation was computed. [2023-11-26 11:58:36,596 INFO L899 garLoopResultBuilder]: For program point L175-1(lines 167 195) no Hoare annotation was computed. [2023-11-26 11:58:36,596 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 717 743) no Hoare annotation was computed. [2023-11-26 11:58:36,597 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 705) no Hoare annotation was computed. [2023-11-26 11:58:36,598 INFO L899 garLoopResultBuilder]: For program point L224(lines 199 228) no Hoare annotation was computed. [2023-11-26 11:58:36,601 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 199 228) no Hoare annotation was computed. [2023-11-26 11:58:36,602 INFO L899 garLoopResultBuilder]: For program point L220(line 220) no Hoare annotation was computed. [2023-11-26 11:58:36,602 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 217) no Hoare annotation was computed. [2023-11-26 11:58:36,607 INFO L902 garLoopResultBuilder]: At program point L213-1(lines 213 217) the Hoare annotation is: true [2023-11-26 11:58:36,610 INFO L902 garLoopResultBuilder]: At program point L209-2(lines 209 223) the Hoare annotation is: true [2023-11-26 11:58:36,611 INFO L902 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: true [2023-11-26 11:58:36,611 INFO L899 garLoopResultBuilder]: For program point L205-1(line 205) no Hoare annotation was computed. [2023-11-26 11:58:36,611 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 228) the Hoare annotation is: true [2023-11-26 11:58:36,611 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 896) no Hoare annotation was computed. [2023-11-26 11:58:36,615 INFO L899 garLoopResultBuilder]: For program point L890-1(lines 890 896) no Hoare annotation was computed. [2023-11-26 11:58:36,615 INFO L899 garLoopResultBuilder]: For program point L973(lines 910 977) no Hoare annotation was computed. [2023-11-26 11:58:36,616 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2023-11-26 11:58:36,616 INFO L899 garLoopResultBuilder]: For program point L940-1(lines 940 946) no Hoare annotation was computed. [2023-11-26 11:58:36,616 INFO L895 garLoopResultBuilder]: At program point L932(line 932) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:58:36,618 INFO L895 garLoopResultBuilder]: At program point L970(lines 919 971) the Hoare annotation is: false [2023-11-26 11:58:36,618 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:58:36,618 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 964) no Hoare annotation was computed. [2023-11-26 11:58:36,618 INFO L895 garLoopResultBuilder]: At program point L892(line 892) the Hoare annotation is: false [2023-11-26 11:58:36,618 INFO L895 garLoopResultBuilder]: At program point L958-2(lines 950 965) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:58:36,619 INFO L899 garLoopResultBuilder]: For program point L921(lines 920 969) no Hoare annotation was computed. [2023-11-26 11:58:36,619 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 965) no Hoare annotation was computed. [2023-11-26 11:58:36,620 INFO L895 garLoopResultBuilder]: At program point L942(line 942) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:58:36,620 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:58:36,620 INFO L895 garLoopResultBuilder]: At program point L967(lines 920 969) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:58:36,621 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 936) no Hoare annotation was computed. [2023-11-26 11:58:36,621 INFO L899 garLoopResultBuilder]: For program point L930-1(lines 930 936) no Hoare annotation was computed. [2023-11-26 11:58:36,621 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2023-11-26 11:58:36,622 INFO L899 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2023-11-26 11:58:36,622 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-26 11:58:36,622 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-26 11:58:36,622 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: true [2023-11-26 11:58:36,622 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 822 830) no Hoare annotation was computed. [2023-11-26 11:58:36,622 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 822 830) the Hoare annotation is: true [2023-11-26 11:58:36,625 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-26 11:58:36,627 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:58:36,645 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:58:36 BoogieIcfgContainer [2023-11-26 11:58:36,646 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:58:36,646 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:58:36,647 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:58:36,647 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:58:36,647 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:58:34" (3/4) ... [2023-11-26 11:58:36,649 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:58:36,653 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:58:36,653 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:58:36,654 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:58:36,654 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:58:36,654 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:58:36,654 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:58:36,654 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-26 11:58:36,664 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-26 11:58:36,664 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:58:36,665 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:58:36,666 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:58:36,666 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:58:36,790 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:58:36,790 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:58:36,790 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:58:36,791 INFO L158 Benchmark]: Toolchain (without parser) took 3413.65ms. Allocated memory was 121.6MB in the beginning and 172.0MB in the end (delta: 50.3MB). Free memory was 75.5MB in the beginning and 83.7MB in the end (delta: -8.2MB). Peak memory consumption was 43.5MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,791 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 121.6MB. Free memory is still 96.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:58:36,792 INFO L158 Benchmark]: CACSL2BoogieTranslator took 757.14ms. Allocated memory was 121.6MB in the beginning and 172.0MB in the end (delta: 50.3MB). Free memory was 75.5MB in the beginning and 139.6MB in the end (delta: -64.1MB). Peak memory consumption was 26.7MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,792 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.82ms. Allocated memory is still 172.0MB. Free memory was 139.6MB in the beginning and 137.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,793 INFO L158 Benchmark]: Boogie Preprocessor took 58.21ms. Allocated memory is still 172.0MB. Free memory was 137.5MB in the beginning and 135.3MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,793 INFO L158 Benchmark]: RCFGBuilder took 629.30ms. Allocated memory is still 172.0MB. Free memory was 135.3MB in the beginning and 114.4MB in the end (delta: 20.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,794 INFO L158 Benchmark]: TraceAbstraction took 1749.54ms. Allocated memory is still 172.0MB. Free memory was 114.1MB in the beginning and 91.1MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,794 INFO L158 Benchmark]: Witness Printer took 144.08ms. Allocated memory is still 172.0MB. Free memory was 91.1MB in the beginning and 83.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 11:58:36,798 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 121.6MB. Free memory is still 96.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 757.14ms. Allocated memory was 121.6MB in the beginning and 172.0MB in the end (delta: 50.3MB). Free memory was 75.5MB in the beginning and 139.6MB in the end (delta: -64.1MB). Peak memory consumption was 26.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.82ms. Allocated memory is still 172.0MB. Free memory was 139.6MB in the beginning and 137.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 58.21ms. Allocated memory is still 172.0MB. Free memory was 137.5MB in the beginning and 135.3MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 629.30ms. Allocated memory is still 172.0MB. Free memory was 135.3MB in the beginning and 114.4MB in the end (delta: 20.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 1749.54ms. Allocated memory is still 172.0MB. Free memory was 114.1MB in the beginning and 91.1MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * Witness Printer took 144.08ms. Allocated memory is still 172.0MB. Free memory was 91.1MB in the beginning and 83.7MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 145]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [145] - GenericResultAtLocation [Line: 196]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [196] - GenericResultAtLocation [Line: 299]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [299] - GenericResultAtLocation [Line: 665]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [665] - GenericResultAtLocation [Line: 700]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [700] - GenericResultAtLocation [Line: 709]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [709] - GenericResultAtLocation [Line: 909]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [909] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 705]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 110 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 105 mSDsluCounter, 429 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 192 mSDsCounter, 4 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 130 IncrementalHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4 mSolverCounterUnsat, 237 mSDtfsCounter, 130 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 32 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=101occurred in iteration=3, InterpolantAutomatonStates: 14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 21 LocationsWithAnnotation, 121 PreInvPairs, 133 NumberOfFragments, 79 HoareAnnotationTreeSize, 121 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 21 FomulaSimplificationsInter, 192 FormulaSimplificationTreeSizeReductionInter, 0.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 100 NumberOfCodeBlocks, 100 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 96 ConstructedInterpolants, 0 QuantifiedInterpolants, 158 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 8/8 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-26 11:58:36,838 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_84f66fd2-b4a3-4737-a666-c18915f5aa1a/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE