./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9f236da57fa92653d636674a80852c8106739bc443cbd0a5f898a694ed49c247 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:53:06,186 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:53:06,308 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:53:06,319 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:53:06,320 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:53:06,364 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:53:06,364 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:53:06,365 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:53:06,366 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:53:06,367 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:53:06,367 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:53:06,368 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:53:06,369 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:53:06,370 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:53:06,370 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:53:06,371 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:53:06,372 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:53:06,372 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:53:06,373 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:53:06,373 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:53:06,374 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:53:06,375 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:53:06,375 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:53:06,376 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:53:06,376 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:53:06,377 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:53:06,377 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:53:06,378 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:53:06,379 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:53:06,379 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:53:06,380 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:53:06,380 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:53:06,381 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:53:06,381 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:53:06,382 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:53:06,382 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:53:06,383 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:53:06,384 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:53:06,384 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:53:06,385 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:53:06,385 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:53:06,386 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:53:06,386 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f236da57fa92653d636674a80852c8106739bc443cbd0a5f898a694ed49c247 [2023-11-26 11:53:06,630 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:53:06,654 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:53:06,657 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:53:06,658 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:53:06,659 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:53:06,661 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c [2023-11-26 11:53:09,934 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:53:10,170 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:53:10,171 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c [2023-11-26 11:53:10,186 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/data/1e83e1679/99ab0b817b7f4d3690040aa97e663aa4/FLAG4af67d4b1 [2023-11-26 11:53:10,207 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/data/1e83e1679/99ab0b817b7f4d3690040aa97e663aa4 [2023-11-26 11:53:10,210 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:53:10,214 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:53:10,216 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:53:10,217 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:53:10,224 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:53:10,227 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,228 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@484817fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10, skipping insertion in model container [2023-11-26 11:53:10,229 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,305 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:53:10,486 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c[2141,2154] [2023-11-26 11:53:10,626 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:53:10,653 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:53:10,663 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-26 11:53:10,665 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] [2023-11-26 11:53:10,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [96] [2023-11-26 11:53:10,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [192] [2023-11-26 11:53:10,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [393] [2023-11-26 11:53:10,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [463] [2023-11-26 11:53:10,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [502] [2023-11-26 11:53:10,667 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [599] [2023-11-26 11:53:10,674 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/sv-benchmarks/c/product-lines/minepump_spec2_product28.cil.c[2141,2154] [2023-11-26 11:53:10,729 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:53:10,747 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:53:10,748 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10 WrapperNode [2023-11-26 11:53:10,748 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:53:10,749 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:53:10,749 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:53:10,749 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:53:10,757 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,773 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,802 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 23, calls inlined = 18, statements flattened = 174 [2023-11-26 11:53:10,802 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:53:10,803 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:53:10,803 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:53:10,804 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:53:10,816 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,816 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,819 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,834 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:53:10,834 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,835 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,841 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,847 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,849 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,852 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,855 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:53:10,856 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:53:10,857 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:53:10,857 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:53:10,858 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (1/1) ... [2023-11-26 11:53:10,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:53:10,890 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:53:10,903 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:53:10,920 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:53:10,940 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:53:10,940 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:53:10,940 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:53:10,941 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:53:10,941 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:53:10,941 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:53:10,941 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:53:10,941 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-26 11:53:10,941 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-26 11:53:10,941 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:53:10,941 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:53:10,942 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:53:10,942 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:53:10,942 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:53:10,942 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:53:10,942 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:53:10,942 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:53:10,943 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:53:11,034 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:53:11,037 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:53:11,444 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:53:11,549 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:53:11,549 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:53:11,550 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:11 BoogieIcfgContainer [2023-11-26 11:53:11,550 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:53:11,553 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:53:11,557 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:53:11,561 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:53:11,561 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:53:10" (1/3) ... [2023-11-26 11:53:11,562 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32bd1a4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:53:11, skipping insertion in model container [2023-11-26 11:53:11,562 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:53:10" (2/3) ... [2023-11-26 11:53:11,563 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32bd1a4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:53:11, skipping insertion in model container [2023-11-26 11:53:11,563 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:11" (3/3) ... [2023-11-26 11:53:11,564 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product28.cil.c [2023-11-26 11:53:11,580 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:53:11,581 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:53:11,632 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:53:11,640 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@74d24718, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:53:11,640 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:53:11,645 INFO L276 IsEmpty]: Start isEmpty. Operand has 63 states, 43 states have (on average 1.558139534883721) internal successors, (67), 50 states have internal predecessors, (67), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-26 11:53:11,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-26 11:53:11,656 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:11,657 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:11,657 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:11,663 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:11,664 INFO L85 PathProgramCache]: Analyzing trace with hash 107310022, now seen corresponding path program 1 times [2023-11-26 11:53:11,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:11,675 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [311909063] [2023-11-26 11:53:11,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:11,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:11,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-26 11:53:11,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:11,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:11,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:11,892 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [311909063] [2023-11-26 11:53:11,893 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [311909063] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:11,896 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:11,896 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:53:11,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043444108] [2023-11-26 11:53:11,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:11,902 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:53:11,903 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:11,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:53:11,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:53:11,938 INFO L87 Difference]: Start difference. First operand has 63 states, 43 states have (on average 1.558139534883721) internal successors, (67), 50 states have internal predecessors, (67), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:11,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:11,998 INFO L93 Difference]: Finished difference Result 124 states and 179 transitions. [2023-11-26 11:53:12,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:53:12,001 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-26 11:53:12,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:12,011 INFO L225 Difference]: With dead ends: 124 [2023-11-26 11:53:12,011 INFO L226 Difference]: Without dead ends: 58 [2023-11-26 11:53:12,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:53:12,019 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:12,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 70 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:53:12,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-11-26 11:53:12,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58. [2023-11-26 11:53:12,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 40 states have (on average 1.425) internal successors, (57), 46 states have internal predecessors, (57), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-26 11:53:12,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 78 transitions. [2023-11-26 11:53:12,071 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 78 transitions. Word has length 17 [2023-11-26 11:53:12,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:12,071 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 78 transitions. [2023-11-26 11:53:12,072 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,072 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 78 transitions. [2023-11-26 11:53:12,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-26 11:53:12,075 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:12,075 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:12,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:53:12,076 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:12,076 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:12,077 INFO L85 PathProgramCache]: Analyzing trace with hash -1803246529, now seen corresponding path program 1 times [2023-11-26 11:53:12,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:12,078 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329087055] [2023-11-26 11:53:12,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:12,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:12,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-26 11:53:12,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:12,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:12,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329087055] [2023-11-26 11:53:12,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329087055] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:12,262 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:12,263 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:53:12,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414966318] [2023-11-26 11:53:12,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:12,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:53:12,264 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:12,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:53:12,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:12,266 INFO L87 Difference]: Start difference. First operand 58 states and 78 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:12,302 INFO L93 Difference]: Finished difference Result 86 states and 114 transitions. [2023-11-26 11:53:12,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:53:12,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-26 11:53:12,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:12,304 INFO L225 Difference]: With dead ends: 86 [2023-11-26 11:53:12,304 INFO L226 Difference]: Without dead ends: 50 [2023-11-26 11:53:12,305 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:12,306 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:12,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 96 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:53:12,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2023-11-26 11:53:12,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2023-11-26 11:53:12,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 35 states have (on average 1.457142857142857) internal successors, (51), 41 states have internal predecessors, (51), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-26 11:53:12,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 67 transitions. [2023-11-26 11:53:12,317 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 67 transitions. Word has length 18 [2023-11-26 11:53:12,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:12,317 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 67 transitions. [2023-11-26 11:53:12,318 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,318 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 67 transitions. [2023-11-26 11:53:12,319 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-26 11:53:12,319 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:12,319 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:12,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:53:12,320 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:12,321 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:12,321 INFO L85 PathProgramCache]: Analyzing trace with hash -2136092305, now seen corresponding path program 1 times [2023-11-26 11:53:12,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:12,321 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072213789] [2023-11-26 11:53:12,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:12,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:12,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:53:12,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:12,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:12,433 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072213789] [2023-11-26 11:53:12,433 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2072213789] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:12,434 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:12,434 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:53:12,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [224034272] [2023-11-26 11:53:12,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:12,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:53:12,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:12,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:53:12,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:12,438 INFO L87 Difference]: Start difference. First operand 50 states and 67 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:12,525 INFO L93 Difference]: Finished difference Result 146 states and 198 transitions. [2023-11-26 11:53:12,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:53:12,526 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 21 [2023-11-26 11:53:12,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:12,528 INFO L225 Difference]: With dead ends: 146 [2023-11-26 11:53:12,528 INFO L226 Difference]: Without dead ends: 98 [2023-11-26 11:53:12,529 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:53:12,530 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 61 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:12,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 121 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:53:12,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2023-11-26 11:53:12,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 95. [2023-11-26 11:53:12,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 66 states have (on average 1.4696969696969697) internal successors, (97), 77 states have internal predecessors, (97), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-26 11:53:12,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 129 transitions. [2023-11-26 11:53:12,554 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 129 transitions. Word has length 21 [2023-11-26 11:53:12,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:12,555 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 129 transitions. [2023-11-26 11:53:12,555 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,555 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 129 transitions. [2023-11-26 11:53:12,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-26 11:53:12,557 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:53:12,557 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:53:12,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:53:12,557 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:53:12,558 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:53:12,558 INFO L85 PathProgramCache]: Analyzing trace with hash 2013502553, now seen corresponding path program 1 times [2023-11-26 11:53:12,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:53:12,559 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789763446] [2023-11-26 11:53:12,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:53:12,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:53:12,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:53:12,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:53:12,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:53:12,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:53:12,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1789763446] [2023-11-26 11:53:12,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1789763446] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:53:12,698 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:53:12,698 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-26 11:53:12,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450673765] [2023-11-26 11:53:12,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:53:12,699 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-26 11:53:12,699 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:53:12,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-26 11:53:12,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-26 11:53:12,701 INFO L87 Difference]: Start difference. First operand 95 states and 129 transitions. Second operand has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:53:12,756 INFO L93 Difference]: Finished difference Result 166 states and 225 transitions. [2023-11-26 11:53:12,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-26 11:53:12,756 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-26 11:53:12,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:53:12,757 INFO L225 Difference]: With dead ends: 166 [2023-11-26 11:53:12,757 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:53:12,759 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:53:12,760 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 28 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:53:12,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 65 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:53:12,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:53:12,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:53:12,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:53:12,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:53:12,763 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 24 [2023-11-26 11:53:12,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:53:12,763 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:53:12,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.25) internal successors, (21), 4 states have internal predecessors, (21), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-26 11:53:12,764 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:53:12,764 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:53:12,766 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:53:12,766 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:53:12,768 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:53:12,949 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 287 294) no Hoare annotation was computed. [2023-11-26 11:53:12,950 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 287 294) the Hoare annotation is: true [2023-11-26 11:53:12,950 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 228 234) no Hoare annotation was computed. [2023-11-26 11:53:12,950 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 228 234) the Hoare annotation is: true [2023-11-26 11:53:12,950 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 130 141) the Hoare annotation is: true [2023-11-26 11:53:12,951 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 130 141) no Hoare annotation was computed. [2023-11-26 11:53:12,951 INFO L899 garLoopResultBuilder]: For program point L134-1(lines 130 141) no Hoare annotation was computed. [2023-11-26 11:53:12,951 INFO L902 garLoopResultBuilder]: At program point L514-2(lines 514 528) the Hoare annotation is: true [2023-11-26 11:53:12,952 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 504 533) no Hoare annotation was computed. [2023-11-26 11:53:12,952 INFO L902 garLoopResultBuilder]: At program point L510(line 510) the Hoare annotation is: true [2023-11-26 11:53:12,954 INFO L899 garLoopResultBuilder]: For program point L510-1(line 510) no Hoare annotation was computed. [2023-11-26 11:53:12,955 INFO L899 garLoopResultBuilder]: For program point L529(lines 504 533) no Hoare annotation was computed. [2023-11-26 11:53:12,955 INFO L899 garLoopResultBuilder]: For program point L525(line 525) no Hoare annotation was computed. [2023-11-26 11:53:12,955 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 504 533) the Hoare annotation is: true [2023-11-26 11:53:12,956 INFO L899 garLoopResultBuilder]: For program point L518(lines 518 522) no Hoare annotation was computed. [2023-11-26 11:53:12,957 INFO L902 garLoopResultBuilder]: At program point L518-1(lines 518 522) the Hoare annotation is: true [2023-11-26 11:53:12,957 INFO L899 garLoopResultBuilder]: For program point L481(lines 481 498) no Hoare annotation was computed. [2023-11-26 11:53:12,957 INFO L899 garLoopResultBuilder]: For program point L481-1(lines 473 501) no Hoare annotation was computed. [2023-11-26 11:53:12,957 INFO L895 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-26 11:53:12,957 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-26 11:53:12,958 INFO L899 garLoopResultBuilder]: For program point L110(lines 110 114) no Hoare annotation was computed. [2023-11-26 11:53:12,958 INFO L899 garLoopResultBuilder]: For program point L110-2(lines 106 117) no Hoare annotation was computed. [2023-11-26 11:53:12,958 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 492) no Hoare annotation was computed. [2023-11-26 11:53:12,959 INFO L895 garLoopResultBuilder]: At program point L255(line 255) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:53:12,959 INFO L899 garLoopResultBuilder]: For program point L255-1(lines 236 260) no Hoare annotation was computed. [2023-11-26 11:53:12,960 INFO L895 garLoopResultBuilder]: At program point L479(line 479) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:53:12,960 INFO L899 garLoopResultBuilder]: For program point L479-1(line 479) no Hoare annotation was computed. [2023-11-26 11:53:12,961 INFO L899 garLoopResultBuilder]: For program point L215-1(lines 215 221) no Hoare annotation was computed. [2023-11-26 11:53:12,962 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 252) no Hoare annotation was computed. [2023-11-26 11:53:12,962 INFO L899 garLoopResultBuilder]: For program point L240(lines 240 257) no Hoare annotation was computed. [2023-11-26 11:53:12,962 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 204 227) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-26 11:53:12,963 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 364) no Hoare annotation was computed. [2023-11-26 11:53:12,963 INFO L899 garLoopResultBuilder]: For program point L360-2(lines 360 364) no Hoare annotation was computed. [2023-11-26 11:53:12,968 INFO L899 garLoopResultBuilder]: For program point L92(line 92) no Hoare annotation was computed. [2023-11-26 11:53:12,968 INFO L899 garLoopResultBuilder]: For program point L208-1(lines 207 226) no Hoare annotation was computed. [2023-11-26 11:53:12,969 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 204 227) no Hoare annotation was computed. [2023-11-26 11:53:12,969 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 92) no Hoare annotation was computed. [2023-11-26 11:53:12,970 INFO L899 garLoopResultBuilder]: For program point L485(lines 485 495) no Hoare annotation was computed. [2023-11-26 11:53:12,970 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 142 150) the Hoare annotation is: true [2023-11-26 11:53:12,971 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 142 150) no Hoare annotation was computed. [2023-11-26 11:53:12,972 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2023-11-26 11:53:12,975 INFO L899 garLoopResultBuilder]: For program point L415-1(lines 415 421) no Hoare annotation was computed. [2023-11-26 11:53:12,975 INFO L899 garLoopResultBuilder]: For program point L374(lines 374 380) no Hoare annotation was computed. [2023-11-26 11:53:12,975 INFO L899 garLoopResultBuilder]: For program point L374-1(lines 374 380) no Hoare annotation was computed. [2023-11-26 11:53:12,976 INFO L899 garLoopResultBuilder]: For program point L586(lines 586 593) no Hoare annotation was computed. [2023-11-26 11:53:12,976 INFO L899 garLoopResultBuilder]: For program point L458(lines 395 462) no Hoare annotation was computed. [2023-11-26 11:53:12,976 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 431) no Hoare annotation was computed. [2023-11-26 11:53:12,977 INFO L899 garLoopResultBuilder]: For program point L425-1(lines 425 431) no Hoare annotation was computed. [2023-11-26 11:53:12,977 INFO L899 garLoopResultBuilder]: For program point L586-2(lines 586 593) no Hoare annotation was computed. [2023-11-26 11:53:12,977 INFO L895 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:53:12,981 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:53:12,981 INFO L895 garLoopResultBuilder]: At program point L376(line 376) the Hoare annotation is: false [2023-11-26 11:53:12,981 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:53:12,981 INFO L895 garLoopResultBuilder]: At program point L455(lines 404 456) the Hoare annotation is: false [2023-11-26 11:53:12,982 INFO L899 garLoopResultBuilder]: For program point L443(lines 443 449) no Hoare annotation was computed. [2023-11-26 11:53:12,982 INFO L895 garLoopResultBuilder]: At program point L443-2(lines 435 450) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:53:12,982 INFO L899 garLoopResultBuilder]: For program point L406(lines 405 454) no Hoare annotation was computed. [2023-11-26 11:53:12,982 INFO L899 garLoopResultBuilder]: For program point L435(lines 435 450) no Hoare annotation was computed. [2023-11-26 11:53:12,982 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:53:12,983 INFO L895 garLoopResultBuilder]: At program point L452(lines 405 454) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-26 11:53:12,983 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 118 129) no Hoare annotation was computed. [2023-11-26 11:53:12,983 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 118 129) the Hoare annotation is: true [2023-11-26 11:53:12,983 INFO L899 garLoopResultBuilder]: For program point L122-1(lines 118 129) no Hoare annotation was computed. [2023-11-26 11:53:12,989 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-26 11:53:12,991 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:53:13,008 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:53:13 BoogieIcfgContainer [2023-11-26 11:53:13,008 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:53:13,009 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:53:13,009 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:53:13,009 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:53:13,010 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:53:11" (3/4) ... [2023-11-26 11:53:13,011 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:53:13,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:53:13,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:53:13,014 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:53:13,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:53:13,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:53:13,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-26 11:53:13,015 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:53:13,023 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 31 nodes and edges [2023-11-26 11:53:13,023 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:53:13,026 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:53:13,026 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:53:13,027 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:53:13,153 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:53:13,153 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:53:13,154 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:53:13,154 INFO L158 Benchmark]: Toolchain (without parser) took 2940.56ms. Allocated memory was 138.4MB in the beginning and 174.1MB in the end (delta: 35.7MB). Free memory was 91.6MB in the beginning and 111.0MB in the end (delta: -19.3MB). Peak memory consumption was 17.5MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,155 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory was 86.4MB in the beginning and 86.2MB in the end (delta: 142.7kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:53:13,155 INFO L158 Benchmark]: CACSL2BoogieTranslator took 532.33ms. Allocated memory is still 138.4MB. Free memory was 91.6MB in the beginning and 71.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,156 INFO L158 Benchmark]: Boogie Procedure Inliner took 53.57ms. Allocated memory is still 138.4MB. Free memory was 71.9MB in the beginning and 69.7MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,156 INFO L158 Benchmark]: Boogie Preprocessor took 52.45ms. Allocated memory is still 138.4MB. Free memory was 69.7MB in the beginning and 67.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,156 INFO L158 Benchmark]: RCFGBuilder took 694.05ms. Allocated memory was 138.4MB in the beginning and 174.1MB in the end (delta: 35.7MB). Free memory was 67.2MB in the beginning and 133.2MB in the end (delta: -65.9MB). Peak memory consumption was 18.3MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,157 INFO L158 Benchmark]: TraceAbstraction took 1454.78ms. Allocated memory is still 174.1MB. Free memory was 132.3MB in the beginning and 118.3MB in the end (delta: 14.0MB). Peak memory consumption was 13.8MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,158 INFO L158 Benchmark]: Witness Printer took 144.98ms. Allocated memory is still 174.1MB. Free memory was 118.3MB in the beginning and 111.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-26 11:53:13,161 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory was 86.4MB in the beginning and 86.2MB in the end (delta: 142.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 532.33ms. Allocated memory is still 138.4MB. Free memory was 91.6MB in the beginning and 71.9MB in the end (delta: 19.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 53.57ms. Allocated memory is still 138.4MB. Free memory was 71.9MB in the beginning and 69.7MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 52.45ms. Allocated memory is still 138.4MB. Free memory was 69.7MB in the beginning and 67.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 694.05ms. Allocated memory was 138.4MB in the beginning and 174.1MB in the end (delta: 35.7MB). Free memory was 67.2MB in the beginning and 133.2MB in the end (delta: -65.9MB). Peak memory consumption was 18.3MB. Max. memory is 16.1GB. * TraceAbstraction took 1454.78ms. Allocated memory is still 174.1MB. Free memory was 132.3MB in the beginning and 118.3MB in the end (delta: 14.0MB). Peak memory consumption was 13.8MB. Max. memory is 16.1GB. * Witness Printer took 144.98ms. Allocated memory is still 174.1MB. Free memory was 118.3MB in the beginning and 111.0MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [87] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [96] - GenericResultAtLocation [Line: 192]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [192] - GenericResultAtLocation [Line: 393]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [393] - GenericResultAtLocation [Line: 463]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [463] - GenericResultAtLocation [Line: 502]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [502] - GenericResultAtLocation [Line: 599]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [599] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 92]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 63 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.4s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 107 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 103 mSDsluCounter, 352 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 126 mSDsCounter, 4 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 82 IncrementalHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4 mSolverCounterUnsat, 226 mSDtfsCounter, 82 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 21 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=95occurred in iteration=3, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 104 PreInvPairs, 116 NumberOfFragments, 71 HoareAnnotationTreeSize, 104 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 175 FormulaSimplificationTreeSizeReductionInter, 0.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 80 NumberOfCodeBlocks, 80 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 76 ConstructedInterpolants, 0 QuantifiedInterpolants, 124 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-26 11:53:13,200 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c77f1fe3-d152-437c-b19f-7838f93bec5e/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE