./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f148fc9ce65faa66ebebdaf3c4bc47bc200a3ebfe7e123b8276da7aa11779ba7 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 02:29:44,737 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 02:29:44,815 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 02:29:44,821 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 02:29:44,822 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 02:29:44,853 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 02:29:44,854 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 02:29:44,854 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 02:29:44,855 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 02:29:44,856 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 02:29:44,856 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 02:29:44,857 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 02:29:44,858 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 02:29:44,859 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 02:29:44,859 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 02:29:44,860 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 02:29:44,860 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 02:29:44,861 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 02:29:44,862 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 02:29:44,862 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 02:29:44,863 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 02:29:44,864 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 02:29:44,864 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 02:29:44,865 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 02:29:44,865 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 02:29:44,866 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 02:29:44,866 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 02:29:44,867 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 02:29:44,867 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 02:29:44,868 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 02:29:44,868 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 02:29:44,869 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:29:44,869 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 02:29:44,870 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 02:29:44,870 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 02:29:44,870 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 02:29:44,870 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 02:29:44,871 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 02:29:44,871 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 02:29:44,871 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 02:29:44,871 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 02:29:44,872 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 02:29:44,872 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f148fc9ce65faa66ebebdaf3c4bc47bc200a3ebfe7e123b8276da7aa11779ba7 [2023-11-29 02:29:45,144 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 02:29:45,170 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 02:29:45,173 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 02:29:45,174 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 02:29:45,175 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 02:29:45,176 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c [2023-11-29 02:29:48,375 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 02:29:48,633 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 02:29:48,633 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c [2023-11-29 02:29:48,645 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/data/007772416/dc1ec8427426498986d73234bc6b85e6/FLAG989910144 [2023-11-29 02:29:48,660 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/data/007772416/dc1ec8427426498986d73234bc6b85e6 [2023-11-29 02:29:48,663 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 02:29:48,664 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 02:29:48,665 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 02:29:48,665 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 02:29:48,671 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 02:29:48,671 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:29:48" (1/1) ... [2023-11-29 02:29:48,673 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d94826a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:48, skipping insertion in model container [2023-11-29 02:29:48,673 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:29:48" (1/1) ... [2023-11-29 02:29:48,731 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 02:29:48,932 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c[4901,4914] [2023-11-29 02:29:49,017 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:29:49,032 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 02:29:49,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 02:29:49,047 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [135] [2023-11-29 02:29:49,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [163] [2023-11-29 02:29:49,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [201] [2023-11-29 02:29:49,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [300] [2023-11-29 02:29:49,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [309] [2023-11-29 02:29:49,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [675] [2023-11-29 02:29:49,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] [2023-11-29 02:29:49,067 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/sv-benchmarks/c/product-lines/minepump_spec1_product16.cil.c[4901,4914] [2023-11-29 02:29:49,119 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:29:49,143 INFO L206 MainTranslator]: Completed translation [2023-11-29 02:29:49,143 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49 WrapperNode [2023-11-29 02:29:49,144 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 02:29:49,145 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 02:29:49,145 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 02:29:49,145 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 02:29:49,154 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,173 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,205 INFO L138 Inliner]: procedures = 53, calls = 97, calls flagged for inlining = 19, calls inlined = 15, statements flattened = 145 [2023-11-29 02:29:49,205 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 02:29:49,206 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 02:29:49,206 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 02:29:49,207 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 02:29:49,221 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,222 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,224 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,242 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 02:29:49,242 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,243 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,248 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,253 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,255 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,257 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,260 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 02:29:49,261 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 02:29:49,261 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 02:29:49,262 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 02:29:49,263 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (1/1) ... [2023-11-29 02:29:49,270 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:29:49,284 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 02:29:49,298 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 02:29:49,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 02:29:49,344 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 02:29:49,344 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 02:29:49,344 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 02:29:49,345 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 02:29:49,345 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 02:29:49,345 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 02:29:49,345 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 02:29:49,345 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 02:29:49,346 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 02:29:49,346 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:29:49,346 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:29:49,347 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 02:29:49,347 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 02:29:49,347 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 02:29:49,347 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 02:29:49,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 02:29:49,347 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 02:29:49,348 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 02:29:49,348 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 02:29:49,348 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 02:29:49,446 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 02:29:49,449 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 02:29:49,676 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 02:29:49,756 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 02:29:49,756 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 02:29:49,757 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:29:49 BoogieIcfgContainer [2023-11-29 02:29:49,757 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 02:29:49,761 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 02:29:49,761 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 02:29:49,764 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 02:29:49,765 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 02:29:48" (1/3) ... [2023-11-29 02:29:49,765 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3393d21d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:29:49, skipping insertion in model container [2023-11-29 02:29:49,765 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:29:49" (2/3) ... [2023-11-29 02:29:49,766 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3393d21d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:29:49, skipping insertion in model container [2023-11-29 02:29:49,766 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:29:49" (3/3) ... [2023-11-29 02:29:49,767 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product16.cil.c [2023-11-29 02:29:49,785 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 02:29:49,785 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 02:29:49,838 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 02:29:49,845 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7a670c4a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 02:29:49,845 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 02:29:49,850 INFO L276 IsEmpty]: Start isEmpty. Operand has 66 states, 43 states have (on average 1.5116279069767442) internal successors, (65), 50 states have internal predecessors, (65), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 02:29:49,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 02:29:49,859 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:29:49,859 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:29:49,860 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:29:49,866 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:29:49,866 INFO L85 PathProgramCache]: Analyzing trace with hash 553903360, now seen corresponding path program 1 times [2023-11-29 02:29:49,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:29:49,875 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489769644] [2023-11-29 02:29:49,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:29:49,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:29:49,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 02:29:50,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:29:50,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:29:50,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489769644] [2023-11-29 02:29:50,067 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489769644] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:29:50,067 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:29:50,067 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 02:29:50,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117377285] [2023-11-29 02:29:50,070 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:29:50,076 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 02:29:50,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:29:50,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 02:29:50,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:29:50,116 INFO L87 Difference]: Start difference. First operand has 66 states, 43 states have (on average 1.5116279069767442) internal successors, (65), 50 states have internal predecessors, (65), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:29:50,184 INFO L93 Difference]: Finished difference Result 130 states and 183 transitions. [2023-11-29 02:29:50,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 02:29:50,187 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-29 02:29:50,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:29:50,199 INFO L225 Difference]: With dead ends: 130 [2023-11-29 02:29:50,199 INFO L226 Difference]: Without dead ends: 61 [2023-11-29 02:29:50,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:29:50,208 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:29:50,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 73 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:29:50,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61 states. [2023-11-29 02:29:50,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 61. [2023-11-29 02:29:50,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 40 states have (on average 1.375) internal successors, (55), 46 states have internal predecessors, (55), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 02:29:50,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 80 transitions. [2023-11-29 02:29:50,260 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 80 transitions. Word has length 16 [2023-11-29 02:29:50,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:29:50,261 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 80 transitions. [2023-11-29 02:29:50,261 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,262 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 80 transitions. [2023-11-29 02:29:50,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 02:29:50,264 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:29:50,264 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:29:50,265 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 02:29:50,265 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:29:50,266 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:29:50,266 INFO L85 PathProgramCache]: Analyzing trace with hash -1854021577, now seen corresponding path program 1 times [2023-11-29 02:29:50,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:29:50,267 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885876526] [2023-11-29 02:29:50,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:29:50,267 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:29:50,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 02:29:50,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:29:50,415 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:29:50,415 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885876526] [2023-11-29 02:29:50,415 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885876526] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:29:50,416 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:29:50,416 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 02:29:50,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686547074] [2023-11-29 02:29:50,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:29:50,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 02:29:50,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:29:50,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 02:29:50,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:29:50,420 INFO L87 Difference]: Start difference. First operand 61 states and 80 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:29:50,458 INFO L93 Difference]: Finished difference Result 92 states and 118 transitions. [2023-11-29 02:29:50,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 02:29:50,458 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 02:29:50,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:29:50,460 INFO L225 Difference]: With dead ends: 92 [2023-11-29 02:29:50,460 INFO L226 Difference]: Without dead ends: 53 [2023-11-29 02:29:50,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:29:50,463 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 14 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:29:50,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 102 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:29:50,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-11-29 02:29:50,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2023-11-29 02:29:50,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 35 states have (on average 1.4) internal successors, (49), 41 states have internal predecessors, (49), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 02:29:50,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 69 transitions. [2023-11-29 02:29:50,476 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 69 transitions. Word has length 17 [2023-11-29 02:29:50,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:29:50,476 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 69 transitions. [2023-11-29 02:29:50,477 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,477 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 69 transitions. [2023-11-29 02:29:50,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-29 02:29:50,479 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:29:50,479 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:29:50,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 02:29:50,479 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:29:50,480 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:29:50,480 INFO L85 PathProgramCache]: Analyzing trace with hash -869850473, now seen corresponding path program 1 times [2023-11-29 02:29:50,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:29:50,481 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1652976137] [2023-11-29 02:29:50,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:29:50,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:29:50,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:29:50,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:29:50,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:29:50,574 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1652976137] [2023-11-29 02:29:50,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1652976137] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:29:50,575 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:29:50,575 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 02:29:50,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2094629672] [2023-11-29 02:29:50,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:29:50,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 02:29:50,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:29:50,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 02:29:50,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:29:50,578 INFO L87 Difference]: Start difference. First operand 53 states and 69 transitions. Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:29:50,638 INFO L93 Difference]: Finished difference Result 155 states and 204 transitions. [2023-11-29 02:29:50,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 02:29:50,639 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-29 02:29:50,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:29:50,641 INFO L225 Difference]: With dead ends: 155 [2023-11-29 02:29:50,641 INFO L226 Difference]: Without dead ends: 104 [2023-11-29 02:29:50,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:29:50,643 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 63 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:29:50,644 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 124 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:29:50,645 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-29 02:29:50,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 101. [2023-11-29 02:29:50,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 77 states have internal predecessors, (93), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 15 states have call predecessors, (20), 20 states have call successors, (20) [2023-11-29 02:29:50,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 133 transitions. [2023-11-29 02:29:50,665 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 133 transitions. Word has length 20 [2023-11-29 02:29:50,665 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:29:50,666 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 133 transitions. [2023-11-29 02:29:50,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,666 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 133 transitions. [2023-11-29 02:29:50,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 02:29:50,668 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:29:50,668 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:29:50,668 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 02:29:50,669 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:29:50,669 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:29:50,669 INFO L85 PathProgramCache]: Analyzing trace with hash -2126119245, now seen corresponding path program 1 times [2023-11-29 02:29:50,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:29:50,670 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353407079] [2023-11-29 02:29:50,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:29:50,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:29:50,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 02:29:50,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:29:50,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:29:50,797 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:29:50,797 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353407079] [2023-11-29 02:29:50,797 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353407079] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:29:50,797 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:29:50,797 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 02:29:50,798 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1306988026] [2023-11-29 02:29:50,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:29:50,798 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 02:29:50,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:29:50,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 02:29:50,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 02:29:50,800 INFO L87 Difference]: Start difference. First operand 101 states and 133 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:29:50,864 INFO L93 Difference]: Finished difference Result 172 states and 229 transitions. [2023-11-29 02:29:50,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 02:29:50,865 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-29 02:29:50,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:29:50,866 INFO L225 Difference]: With dead ends: 172 [2023-11-29 02:29:50,866 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 02:29:50,868 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 02:29:50,869 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 28 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:29:50,870 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 65 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:29:50,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 02:29:50,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 02:29:50,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:29:50,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 02:29:50,871 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 23 [2023-11-29 02:29:50,871 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:29:50,871 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 02:29:50,871 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 02:29:50,872 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 02:29:50,872 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 02:29:50,874 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 02:29:50,875 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 02:29:50,877 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 02:29:51,054 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 765 772) no Hoare annotation was computed. [2023-11-29 02:29:51,055 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 765 772) the Hoare annotation is: true [2023-11-29 02:29:51,055 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 82 93) the Hoare annotation is: true [2023-11-29 02:29:51,055 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 82 93) no Hoare annotation was computed. [2023-11-29 02:29:51,055 INFO L899 garLoopResultBuilder]: For program point L86-1(lines 82 93) no Hoare annotation was computed. [2023-11-29 02:29:51,056 INFO L895 garLoopResultBuilder]: At program point L729(line 729) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 02:29:51,056 INFO L895 garLoopResultBuilder]: At program point L725(line 725) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 02:29:51,056 INFO L895 garLoopResultBuilder]: At program point L721(line 721) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 02:29:51,056 INFO L899 garLoopResultBuilder]: For program point L721-1(line 721) no Hoare annotation was computed. [2023-11-29 02:29:51,057 INFO L895 garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-29 02:29:51,057 INFO L899 garLoopResultBuilder]: For program point L734-1(lines 715 739) no Hoare annotation was computed. [2023-11-29 02:29:51,057 INFO L899 garLoopResultBuilder]: For program point L305(line 305) no Hoare annotation was computed. [2023-11-29 02:29:51,057 INFO L895 garLoopResultBuilder]: At program point L144(line 144) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-29 02:29:51,057 INFO L899 garLoopResultBuilder]: For program point L144-1(line 144) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L899 garLoopResultBuilder]: For program point L62(lines 62 66) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L899 garLoopResultBuilder]: For program point L62-2(lines 58 69) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L899 garLoopResultBuilder]: For program point L694-1(lines 694 700) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L899 garLoopResultBuilder]: For program point L723(lines 723 731) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L899 garLoopResultBuilder]: For program point L719(lines 719 736) no Hoare annotation was computed. [2023-11-29 02:29:51,058 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 683 706) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point L150(lines 150 156) no Hoare annotation was computed. [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point L146(lines 146 159) no Hoare annotation was computed. [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point L146-1(lines 138 162) no Hoare annotation was computed. [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point L687-1(lines 686 705) no Hoare annotation was computed. [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 683 706) no Hoare annotation was computed. [2023-11-29 02:29:51,059 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 305) no Hoare annotation was computed. [2023-11-29 02:29:51,060 INFO L899 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2023-11-29 02:29:51,060 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2023-11-29 02:29:51,060 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2023-11-29 02:29:51,060 INFO L902 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2023-11-29 02:29:51,060 INFO L902 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2023-11-29 02:29:51,061 INFO L902 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2023-11-29 02:29:51,061 INFO L899 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2023-11-29 02:29:51,061 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 204 233) the Hoare annotation is: true [2023-11-29 02:29:51,061 INFO L899 garLoopResultBuilder]: For program point L229(lines 204 233) no Hoare annotation was computed. [2023-11-29 02:29:51,061 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 94 102) the Hoare annotation is: true [2023-11-29 02:29:51,061 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 94 102) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L287(lines 287 294) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L287-2(lines 287 294) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L833(lines 833 839) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L833-1(lines 833 839) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L916(lines 853 920) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2023-11-29 02:29:51,062 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2023-11-29 02:29:51,063 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 02:29:51,063 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 02:29:51,063 INFO L895 garLoopResultBuilder]: At program point L913(lines 862 914) the Hoare annotation is: false [2023-11-29 02:29:51,063 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 02:29:51,063 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-29 02:29:51,064 INFO L895 garLoopResultBuilder]: At program point L835(line 835) the Hoare annotation is: false [2023-11-29 02:29:51,064 INFO L895 garLoopResultBuilder]: At program point L901-2(lines 893 908) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 02:29:51,064 INFO L899 garLoopResultBuilder]: For program point L864(lines 863 912) no Hoare annotation was computed. [2023-11-29 02:29:51,064 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 908) no Hoare annotation was computed. [2023-11-29 02:29:51,064 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 02:29:51,064 INFO L895 garLoopResultBuilder]: At program point L910(lines 863 912) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 02:29:51,065 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-29 02:29:51,065 INFO L899 garLoopResultBuilder]: For program point L873-1(lines 873 879) no Hoare annotation was computed. [2023-11-29 02:29:51,065 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 70 81) no Hoare annotation was computed. [2023-11-29 02:29:51,065 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 70 81) the Hoare annotation is: true [2023-11-29 02:29:51,065 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 70 81) no Hoare annotation was computed. [2023-11-29 02:29:51,065 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 707 713) no Hoare annotation was computed. [2023-11-29 02:29:51,066 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 707 713) the Hoare annotation is: true [2023-11-29 02:29:51,066 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 773 783) no Hoare annotation was computed. [2023-11-29 02:29:51,066 INFO L902 garLoopResultBuilder]: At program point L778(line 778) the Hoare annotation is: true [2023-11-29 02:29:51,066 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 773 783) the Hoare annotation is: true [2023-11-29 02:29:51,066 INFO L899 garLoopResultBuilder]: For program point L778-1(line 778) no Hoare annotation was computed. [2023-11-29 02:29:51,069 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-29 02:29:51,072 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 02:29:51,085 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 02:29:51 BoogieIcfgContainer [2023-11-29 02:29:51,085 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 02:29:51,086 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 02:29:51,086 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 02:29:51,086 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 02:29:51,087 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:29:49" (3/4) ... [2023-11-29 02:29:51,089 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 02:29:51,093 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 02:29:51,094 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 02:29:51,094 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 02:29:51,094 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 02:29:51,094 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 02:29:51,094 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 02:29:51,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:29:51,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 02:29:51,103 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 30 nodes and edges [2023-11-29 02:29:51,103 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 02:29:51,104 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 02:29:51,105 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:29:51,105 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:29:51,232 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 02:29:51,233 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 02:29:51,233 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 02:29:51,234 INFO L158 Benchmark]: Toolchain (without parser) took 2569.97ms. Allocated memory is still 184.5MB. Free memory was 145.1MB in the beginning and 97.0MB in the end (delta: 48.1MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,234 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 107.0MB. Free memory was 59.2MB in the beginning and 59.0MB in the end (delta: 159.4kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 02:29:51,235 INFO L158 Benchmark]: CACSL2BoogieTranslator took 479.18ms. Allocated memory is still 184.5MB. Free memory was 145.1MB in the beginning and 125.7MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,235 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.48ms. Allocated memory is still 184.5MB. Free memory was 125.7MB in the beginning and 123.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,236 INFO L158 Benchmark]: Boogie Preprocessor took 54.14ms. Allocated memory is still 184.5MB. Free memory was 123.6MB in the beginning and 121.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,236 INFO L158 Benchmark]: RCFGBuilder took 496.07ms. Allocated memory is still 184.5MB. Free memory was 121.5MB in the beginning and 102.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,237 INFO L158 Benchmark]: TraceAbstraction took 1324.77ms. Allocated memory is still 184.5MB. Free memory was 101.1MB in the beginning and 103.4MB in the end (delta: -2.3MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 02:29:51,237 INFO L158 Benchmark]: Witness Printer took 147.16ms. Allocated memory is still 184.5MB. Free memory was 103.4MB in the beginning and 97.0MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 02:29:51,240 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 107.0MB. Free memory was 59.2MB in the beginning and 59.0MB in the end (delta: 159.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 479.18ms. Allocated memory is still 184.5MB. Free memory was 145.1MB in the beginning and 125.7MB in the end (delta: 19.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.48ms. Allocated memory is still 184.5MB. Free memory was 125.7MB in the beginning and 123.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 54.14ms. Allocated memory is still 184.5MB. Free memory was 123.6MB in the beginning and 121.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 496.07ms. Allocated memory is still 184.5MB. Free memory was 121.5MB in the beginning and 102.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 1324.77ms. Allocated memory is still 184.5MB. Free memory was 101.1MB in the beginning and 103.4MB in the end (delta: -2.3MB). There was no memory consumed. Max. memory is 16.1GB. * Witness Printer took 147.16ms. Allocated memory is still 184.5MB. Free memory was 103.4MB in the beginning and 97.0MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 135]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [135] - GenericResultAtLocation [Line: 163]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [163] - GenericResultAtLocation [Line: 201]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [201] - GenericResultAtLocation [Line: 300]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [300] - GenericResultAtLocation [Line: 309]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [309] - GenericResultAtLocation [Line: 675]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [675] - GenericResultAtLocation [Line: 852]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [852] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 305]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 66 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.3s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 109 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 105 mSDsluCounter, 364 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 132 mSDsCounter, 4 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 76 IncrementalHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4 mSolverCounterUnsat, 232 mSDtfsCounter, 76 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 21 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=101occurred in iteration=3, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 129 PreInvPairs, 141 NumberOfFragments, 77 HoareAnnotationTreeSize, 129 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 23 FomulaSimplificationsInter, 185 FormulaSimplificationTreeSizeReductionInter, 0.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 76 NumberOfCodeBlocks, 76 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 72 ConstructedInterpolants, 0 QuantifiedInterpolants, 120 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) RESULT: Ultimate proved your program to be correct! [2023-11-29 02:29:51,262 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_eefdf807-f82f-4abb-a840-a5a1865f430b/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE