./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0858956fa78fab41d54951630cb21e24f98b592c89580084f0bb3139b8ef83d9 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 00:59:36,473 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 00:59:36,539 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 00:59:36,544 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 00:59:36,545 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 00:59:36,569 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 00:59:36,569 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 00:59:36,570 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 00:59:36,571 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 00:59:36,571 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 00:59:36,572 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 00:59:36,572 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 00:59:36,573 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 00:59:36,574 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 00:59:36,574 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 00:59:36,575 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 00:59:36,575 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 00:59:36,576 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 00:59:36,576 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 00:59:36,577 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 00:59:36,577 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 00:59:36,579 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 00:59:36,579 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 00:59:36,580 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 00:59:36,580 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 00:59:36,580 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 00:59:36,581 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 00:59:36,581 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 00:59:36,582 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 00:59:36,582 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 00:59:36,582 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 00:59:36,583 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:59:36,583 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 00:59:36,583 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 00:59:36,584 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 00:59:36,585 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 00:59:36,585 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 00:59:36,585 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 00:59:36,586 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 00:59:36,586 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 00:59:36,586 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 00:59:36,586 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 00:59:36,587 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0858956fa78fab41d54951630cb21e24f98b592c89580084f0bb3139b8ef83d9 [2023-11-29 00:59:36,808 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 00:59:36,827 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 00:59:36,830 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 00:59:36,831 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 00:59:36,831 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 00:59:36,832 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c [2023-11-29 00:59:39,963 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 00:59:40,182 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 00:59:40,182 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c [2023-11-29 00:59:40,196 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/data/a0e94273d/6bbe4dba92764d24867d47cd2bb2de9b/FLAG709fd1bfd [2023-11-29 00:59:40,209 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/data/a0e94273d/6bbe4dba92764d24867d47cd2bb2de9b [2023-11-29 00:59:40,211 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 00:59:40,213 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 00:59:40,214 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 00:59:40,215 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 00:59:40,219 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 00:59:40,220 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,220 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7339905a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40, skipping insertion in model container [2023-11-29 00:59:40,221 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,273 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 00:59:40,577 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c[18140,18153] [2023-11-29 00:59:40,583 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:59:40,597 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 00:59:40,606 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-29 00:59:40,608 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] [2023-11-29 00:59:40,608 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [511] [2023-11-29 00:59:40,608 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [581] [2023-11-29 00:59:40,609 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [779] [2023-11-29 00:59:40,609 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [806] [2023-11-29 00:59:40,609 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [844] [2023-11-29 00:59:40,609 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [940] [2023-11-29 00:59:40,677 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/sv-benchmarks/c/product-lines/minepump_spec1_product23.cil.c[18140,18153] [2023-11-29 00:59:40,678 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 00:59:40,699 INFO L206 MainTranslator]: Completed translation [2023-11-29 00:59:40,699 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40 WrapperNode [2023-11-29 00:59:40,699 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 00:59:40,700 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 00:59:40,700 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 00:59:40,701 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 00:59:40,708 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,724 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,755 INFO L138 Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 20, calls inlined = 17, statements flattened = 183 [2023-11-29 00:59:40,755 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 00:59:40,756 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 00:59:40,756 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 00:59:40,757 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 00:59:40,768 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,768 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,771 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,790 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 00:59:40,791 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,791 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,797 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,804 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,806 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,808 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,811 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 00:59:40,812 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 00:59:40,812 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 00:59:40,813 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 00:59:40,814 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (1/1) ... [2023-11-29 00:59:40,820 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 00:59:40,831 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 00:59:40,845 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 00:59:40,858 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 00:59:40,892 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 00:59:40,892 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 00:59:40,892 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 00:59:40,892 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 00:59:40,893 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 00:59:40,893 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 00:59:40,893 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 00:59:40,893 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-29 00:59:40,893 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-29 00:59:40,894 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 00:59:40,894 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 00:59:40,894 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:59:40,894 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:59:40,894 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 00:59:40,894 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 00:59:40,895 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 00:59:40,895 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 00:59:40,895 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 00:59:40,895 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 00:59:40,895 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 00:59:40,986 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 00:59:40,989 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 00:59:41,261 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 00:59:41,341 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 00:59:41,341 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 00:59:41,342 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:59:41 BoogieIcfgContainer [2023-11-29 00:59:41,342 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 00:59:41,345 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 00:59:41,346 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 00:59:41,349 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 00:59:41,349 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 12:59:40" (1/3) ... [2023-11-29 00:59:41,350 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43677d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:59:41, skipping insertion in model container [2023-11-29 00:59:41,350 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 12:59:40" (2/3) ... [2023-11-29 00:59:41,351 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43677d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 12:59:41, skipping insertion in model container [2023-11-29 00:59:41,351 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:59:41" (3/3) ... [2023-11-29 00:59:41,353 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product23.cil.c [2023-11-29 00:59:41,371 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 00:59:41,371 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 00:59:41,424 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 00:59:41,431 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@61540cec, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 00:59:41,432 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 00:59:41,436 INFO L276 IsEmpty]: Start isEmpty. Operand has 72 states, 47 states have (on average 1.5319148936170213) internal successors, (72), 56 states have internal predecessors, (72), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 00:59:41,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 00:59:41,444 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:59:41,444 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:59:41,445 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:59:41,450 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:59:41,451 INFO L85 PathProgramCache]: Analyzing trace with hash 854107779, now seen corresponding path program 1 times [2023-11-29 00:59:41,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:59:41,459 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475317800] [2023-11-29 00:59:41,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:59:41,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:59:41,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:41,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-29 00:59:41,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:41,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 00:59:41,648 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:59:41,648 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475317800] [2023-11-29 00:59:41,649 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475317800] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:59:41,649 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:59:41,649 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 00:59:41,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285822775] [2023-11-29 00:59:41,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:59:41,658 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 00:59:41,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:59:41,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 00:59:41,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:59:41,692 INFO L87 Difference]: Start difference. First operand has 72 states, 47 states have (on average 1.5319148936170213) internal successors, (72), 56 states have internal predecessors, (72), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 11 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:41,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:59:41,757 INFO L93 Difference]: Finished difference Result 142 states and 205 transitions. [2023-11-29 00:59:41,759 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 00:59:41,760 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 16 [2023-11-29 00:59:41,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:59:41,769 INFO L225 Difference]: With dead ends: 142 [2023-11-29 00:59:41,769 INFO L226 Difference]: Without dead ends: 67 [2023-11-29 00:59:41,773 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 00:59:41,778 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:59:41,779 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 83 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:59:41,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-29 00:59:41,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-29 00:59:41,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 44 states have (on average 1.4090909090909092) internal successors, (62), 52 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 10 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-29 00:59:41,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 91 transitions. [2023-11-29 00:59:41,830 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 91 transitions. Word has length 16 [2023-11-29 00:59:41,831 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:59:41,831 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 91 transitions. [2023-11-29 00:59:41,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.0) internal successors, (12), 2 states have internal predecessors, (12), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:41,831 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 91 transitions. [2023-11-29 00:59:41,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2023-11-29 00:59:41,834 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:59:41,834 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:59:41,835 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 00:59:41,835 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:59:41,836 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:59:41,836 INFO L85 PathProgramCache]: Analyzing trace with hash -1349940867, now seen corresponding path program 1 times [2023-11-29 00:59:41,836 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:59:41,836 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [613234476] [2023-11-29 00:59:41,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:59:41,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:59:41,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:41,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-29 00:59:41,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:41,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 00:59:41,947 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:59:41,947 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [613234476] [2023-11-29 00:59:41,947 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [613234476] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:59:41,947 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:59:41,948 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 00:59:41,948 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1509820524] [2023-11-29 00:59:41,948 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:59:41,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 00:59:41,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:59:41,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 00:59:41,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:59:41,952 INFO L87 Difference]: Start difference. First operand 67 states and 91 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:41,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:59:41,991 INFO L93 Difference]: Finished difference Result 104 states and 140 transitions. [2023-11-29 00:59:41,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 00:59:41,992 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2023-11-29 00:59:41,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:59:41,993 INFO L225 Difference]: With dead ends: 104 [2023-11-29 00:59:41,994 INFO L226 Difference]: Without dead ends: 59 [2023-11-29 00:59:41,995 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 00:59:41,997 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 14 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:59:41,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 121 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:59:41,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-11-29 00:59:42,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2023-11-29 00:59:42,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 39 states have (on average 1.435897435897436) internal successors, (56), 47 states have internal predecessors, (56), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 00:59:42,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 80 transitions. [2023-11-29 00:59:42,010 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 80 transitions. Word has length 17 [2023-11-29 00:59:42,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:59:42,011 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 80 transitions. [2023-11-29 00:59:42,011 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:42,011 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 80 transitions. [2023-11-29 00:59:42,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-29 00:59:42,013 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:59:42,013 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:59:42,013 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 00:59:42,014 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:59:42,014 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:59:42,015 INFO L85 PathProgramCache]: Analyzing trace with hash 448718329, now seen corresponding path program 1 times [2023-11-29 00:59:42,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:59:42,015 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1659420235] [2023-11-29 00:59:42,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:59:42,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:59:42,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:42,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 00:59:42,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:42,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 00:59:42,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:59:42,137 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1659420235] [2023-11-29 00:59:42,138 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1659420235] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:59:42,138 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:59:42,138 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 00:59:42,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579653718] [2023-11-29 00:59:42,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:59:42,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 00:59:42,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:59:42,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 00:59:42,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 00:59:42,140 INFO L87 Difference]: Start difference. First operand 59 states and 80 transitions. Second operand has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:42,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:59:42,294 INFO L93 Difference]: Finished difference Result 167 states and 232 transitions. [2023-11-29 00:59:42,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 00:59:42,295 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2023-11-29 00:59:42,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:59:42,298 INFO L225 Difference]: With dead ends: 167 [2023-11-29 00:59:42,298 INFO L226 Difference]: Without dead ends: 110 [2023-11-29 00:59:42,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 00:59:42,301 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 93 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 00:59:42,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 181 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 00:59:42,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2023-11-29 00:59:42,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 93. [2023-11-29 00:59:42,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 63 states have (on average 1.4444444444444444) internal successors, (91), 74 states have internal predecessors, (91), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 12 states have call predecessors, (18), 17 states have call successors, (18) [2023-11-29 00:59:42,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 126 transitions. [2023-11-29 00:59:42,322 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 126 transitions. Word has length 20 [2023-11-29 00:59:42,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:59:42,323 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 126 transitions. [2023-11-29 00:59:42,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:42,323 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 126 transitions. [2023-11-29 00:59:42,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 00:59:42,325 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 00:59:42,325 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 00:59:42,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 00:59:42,325 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 00:59:42,326 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 00:59:42,326 INFO L85 PathProgramCache]: Analyzing trace with hash 1295726455, now seen corresponding path program 1 times [2023-11-29 00:59:42,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 00:59:42,326 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [129345108] [2023-11-29 00:59:42,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 00:59:42,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 00:59:42,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:42,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 00:59:42,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 00:59:42,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 00:59:42,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 00:59:42,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [129345108] [2023-11-29 00:59:42,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [129345108] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 00:59:42,446 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 00:59:42,446 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 00:59:42,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1400116614] [2023-11-29 00:59:42,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 00:59:42,447 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 00:59:42,447 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 00:59:42,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 00:59:42,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 00:59:42,448 INFO L87 Difference]: Start difference. First operand 93 states and 126 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:42,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 00:59:42,502 INFO L93 Difference]: Finished difference Result 164 states and 225 transitions. [2023-11-29 00:59:42,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 00:59:42,504 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-29 00:59:42,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 00:59:42,505 INFO L225 Difference]: With dead ends: 164 [2023-11-29 00:59:42,505 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 00:59:42,508 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 00:59:42,509 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 33 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 00:59:42,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 75 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 00:59:42,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 00:59:42,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 00:59:42,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 00:59:42,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 00:59:42,512 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 23 [2023-11-29 00:59:42,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 00:59:42,512 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 00:59:42,512 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-29 00:59:42,512 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 00:59:42,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 00:59:42,516 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 00:59:42,516 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 00:59:42,519 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 00:59:42,762 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 681 688) no Hoare annotation was computed. [2023-11-29 00:59:42,763 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 681 688) the Hoare annotation is: true [2023-11-29 00:59:42,763 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 614 620) no Hoare annotation was computed. [2023-11-29 00:59:42,763 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 614 620) the Hoare annotation is: true [2023-11-29 00:59:42,763 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 449 460) the Hoare annotation is: true [2023-11-29 00:59:42,763 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2023-11-29 00:59:42,764 INFO L899 garLoopResultBuilder]: For program point L453-1(lines 449 460) no Hoare annotation was computed. [2023-11-29 00:59:42,764 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 846 875) no Hoare annotation was computed. [2023-11-29 00:59:42,764 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 864) no Hoare annotation was computed. [2023-11-29 00:59:42,764 INFO L902 garLoopResultBuilder]: At program point L860-1(lines 860 864) the Hoare annotation is: true [2023-11-29 00:59:42,764 INFO L902 garLoopResultBuilder]: At program point L856-2(lines 856 870) the Hoare annotation is: true [2023-11-29 00:59:42,765 INFO L902 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: true [2023-11-29 00:59:42,765 INFO L899 garLoopResultBuilder]: For program point L852-1(line 852) no Hoare annotation was computed. [2023-11-29 00:59:42,765 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 846 875) the Hoare annotation is: true [2023-11-29 00:59:42,765 INFO L899 garLoopResultBuilder]: For program point L871(lines 846 875) no Hoare annotation was computed. [2023-11-29 00:59:42,765 INFO L899 garLoopResultBuilder]: For program point L867(line 867) no Hoare annotation was computed. [2023-11-29 00:59:42,766 INFO L895 garLoopResultBuilder]: At program point L667(line 667) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0)))) [2023-11-29 00:59:42,766 INFO L899 garLoopResultBuilder]: For program point L667-1(lines 648 672) no Hoare annotation was computed. [2023-11-29 00:59:42,766 INFO L899 garLoopResultBuilder]: For program point L601-1(lines 601 607) no Hoare annotation was computed. [2023-11-29 00:59:42,766 INFO L895 garLoopResultBuilder]: At program point L787(line 787) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-29 00:59:42,769 INFO L899 garLoopResultBuilder]: For program point L787-1(line 787) no Hoare annotation was computed. [2023-11-29 00:59:42,770 INFO L899 garLoopResultBuilder]: For program point L594-1(lines 593 612) no Hoare annotation was computed. [2023-11-29 00:59:42,770 INFO L899 garLoopResultBuilder]: For program point L945(line 945) no Hoare annotation was computed. [2023-11-29 00:59:42,770 INFO L899 garLoopResultBuilder]: For program point L656(lines 656 664) no Hoare annotation was computed. [2023-11-29 00:59:42,770 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2023-11-29 00:59:42,771 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 669) no Hoare annotation was computed. [2023-11-29 00:59:42,771 INFO L899 garLoopResultBuilder]: For program point L429-2(lines 425 436) no Hoare annotation was computed. [2023-11-29 00:59:42,771 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 799) no Hoare annotation was computed. [2023-11-29 00:59:42,771 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 00:59:42,771 INFO L899 garLoopResultBuilder]: For program point L694-1(line 694) no Hoare annotation was computed. [2023-11-29 00:59:42,772 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 802) no Hoare annotation was computed. [2023-11-29 00:59:42,772 INFO L899 garLoopResultBuilder]: For program point L789-1(lines 781 805) no Hoare annotation was computed. [2023-11-29 00:59:42,772 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 590 613) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) [2023-11-29 00:59:42,772 INFO L895 garLoopResultBuilder]: At program point L662(line 662) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 00:59:42,773 INFO L895 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0)) [2023-11-29 00:59:42,773 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 590 613) no Hoare annotation was computed. [2023-11-29 00:59:42,773 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 945) no Hoare annotation was computed. [2023-11-29 00:59:42,773 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 461 469) the Hoare annotation is: true [2023-11-29 00:59:42,773 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 461 469) no Hoare annotation was computed. [2023-11-29 00:59:42,774 INFO L899 garLoopResultBuilder]: For program point L576(lines 515 580) no Hoare annotation was computed. [2023-11-29 00:59:42,774 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 934) no Hoare annotation was computed. [2023-11-29 00:59:42,774 INFO L899 garLoopResultBuilder]: For program point L927-2(lines 927 934) no Hoare annotation was computed. [2023-11-29 00:59:42,774 INFO L899 garLoopResultBuilder]: For program point L535(lines 535 541) no Hoare annotation was computed. [2023-11-29 00:59:42,774 INFO L899 garLoopResultBuilder]: For program point L535-1(lines 535 541) no Hoare annotation was computed. [2023-11-29 00:59:42,775 INFO L895 garLoopResultBuilder]: At program point L573(lines 524 574) the Hoare annotation is: false [2023-11-29 00:59:42,775 INFO L899 garLoopResultBuilder]: For program point L561(lines 561 567) no Hoare annotation was computed. [2023-11-29 00:59:42,775 INFO L895 garLoopResultBuilder]: At program point L561-2(lines 555 568) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 00:59:42,775 INFO L899 garLoopResultBuilder]: For program point L545(lines 545 551) no Hoare annotation was computed. [2023-11-29 00:59:42,775 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 00:59:42,776 INFO L899 garLoopResultBuilder]: For program point L545-1(lines 545 551) no Hoare annotation was computed. [2023-11-29 00:59:42,776 INFO L899 garLoopResultBuilder]: For program point L768(lines 768 774) no Hoare annotation was computed. [2023-11-29 00:59:42,776 INFO L899 garLoopResultBuilder]: For program point L768-1(lines 768 774) no Hoare annotation was computed. [2023-11-29 00:59:42,776 INFO L895 garLoopResultBuilder]: At program point L570(lines 525 572) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 00:59:42,776 INFO L895 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 00:59:42,777 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 00:59:42,777 INFO L899 garLoopResultBuilder]: For program point L526(lines 525 572) no Hoare annotation was computed. [2023-11-29 00:59:42,777 INFO L899 garLoopResultBuilder]: For program point L555(lines 555 568) no Hoare annotation was computed. [2023-11-29 00:59:42,777 INFO L895 garLoopResultBuilder]: At program point L547(line 547) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2023-11-29 00:59:42,778 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: false [2023-11-29 00:59:42,778 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2023-11-29 00:59:42,778 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 437 448) the Hoare annotation is: true [2023-11-29 00:59:42,778 INFO L899 garLoopResultBuilder]: For program point L441-1(lines 437 448) no Hoare annotation was computed. [2023-11-29 00:59:42,778 INFO L895 garLoopResultBuilder]: At program point L636(line 636) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-29 00:59:42,779 INFO L895 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2023-11-29 00:59:42,779 INFO L899 garLoopResultBuilder]: For program point L630(lines 630 638) no Hoare annotation was computed. [2023-11-29 00:59:42,779 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 643) no Hoare annotation was computed. [2023-11-29 00:59:42,779 INFO L899 garLoopResultBuilder]: For program point L754(lines 754 758) no Hoare annotation was computed. [2023-11-29 00:59:42,779 INFO L899 garLoopResultBuilder]: For program point L754-2(lines 754 758) no Hoare annotation was computed. [2023-11-29 00:59:42,780 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 622 646) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-29 00:59:42,780 INFO L895 garLoopResultBuilder]: At program point L641(line 641) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0)) [2023-11-29 00:59:42,780 INFO L899 garLoopResultBuilder]: For program point L641-1(lines 622 646) no Hoare annotation was computed. [2023-11-29 00:59:42,780 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 622 646) no Hoare annotation was computed. [2023-11-29 00:59:42,784 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2023-11-29 00:59:42,786 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 00:59:42,800 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 12:59:42 BoogieIcfgContainer [2023-11-29 00:59:42,800 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 00:59:42,800 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 00:59:42,801 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 00:59:42,801 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 00:59:42,801 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 12:59:41" (3/4) ... [2023-11-29 00:59:42,803 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 00:59:42,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 00:59:42,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 00:59:42,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 00:59:42,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 00:59:42,807 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 00:59:42,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-29 00:59:42,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 00:59:42,808 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-29 00:59:42,817 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 32 nodes and edges [2023-11-29 00:59:42,818 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 00:59:42,818 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 00:59:42,819 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:59:42,820 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 00:59:42,935 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 00:59:42,936 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 00:59:42,936 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 00:59:42,937 INFO L158 Benchmark]: Toolchain (without parser) took 2723.64ms. Allocated memory is still 174.1MB. Free memory was 127.5MB in the beginning and 106.3MB in the end (delta: 21.2MB). Peak memory consumption was 22.1MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,937 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 138.4MB. Free memory is still 87.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 00:59:42,938 INFO L158 Benchmark]: CACSL2BoogieTranslator took 485.17ms. Allocated memory is still 174.1MB. Free memory was 127.1MB in the beginning and 107.8MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,938 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.24ms. Allocated memory is still 174.1MB. Free memory was 107.8MB in the beginning and 105.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,938 INFO L158 Benchmark]: Boogie Preprocessor took 54.91ms. Allocated memory is still 174.1MB. Free memory was 105.7MB in the beginning and 103.4MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,939 INFO L158 Benchmark]: RCFGBuilder took 530.04ms. Allocated memory is still 174.1MB. Free memory was 103.4MB in the beginning and 136.0MB in the end (delta: -32.6MB). Peak memory consumption was 20.9MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,939 INFO L158 Benchmark]: TraceAbstraction took 1454.57ms. Allocated memory is still 174.1MB. Free memory was 136.0MB in the beginning and 113.6MB in the end (delta: 22.4MB). Peak memory consumption was 22.2MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,939 INFO L158 Benchmark]: Witness Printer took 135.48ms. Allocated memory is still 174.1MB. Free memory was 113.6MB in the beginning and 106.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 00:59:42,942 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 138.4MB. Free memory is still 87.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 485.17ms. Allocated memory is still 174.1MB. Free memory was 127.1MB in the beginning and 107.8MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.24ms. Allocated memory is still 174.1MB. Free memory was 107.8MB in the beginning and 105.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 54.91ms. Allocated memory is still 174.1MB. Free memory was 105.7MB in the beginning and 103.4MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 530.04ms. Allocated memory is still 174.1MB. Free memory was 103.4MB in the beginning and 136.0MB in the end (delta: -32.6MB). Peak memory consumption was 20.9MB. Max. memory is 16.1GB. * TraceAbstraction took 1454.57ms. Allocated memory is still 174.1MB. Free memory was 136.0MB in the beginning and 113.6MB in the end (delta: 22.4MB). Peak memory consumption was 22.2MB. Max. memory is 16.1GB. * Witness Printer took 135.48ms. Allocated memory is still 174.1MB. Free memory was 113.6MB in the beginning and 106.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] - GenericResultAtLocation [Line: 511]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [511] - GenericResultAtLocation [Line: 581]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [581] - GenericResultAtLocation [Line: 779]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [779] - GenericResultAtLocation [Line: 806]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [806] - GenericResultAtLocation [Line: 844]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [844] - GenericResultAtLocation [Line: 940]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [940] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 945]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 72 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.4s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 144 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 140 mSDsluCounter, 460 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 197 mSDsCounter, 13 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 122 IncrementalHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 13 mSolverCounterUnsat, 263 mSDtfsCounter, 122 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=93occurred in iteration=3, InterpolantAutomatonStates: 13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 17 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 25 LocationsWithAnnotation, 154 PreInvPairs, 167 NumberOfFragments, 118 HoareAnnotationTreeSize, 154 FomulaSimplifications, 9 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 25 FomulaSimplificationsInter, 248 FormulaSimplificationTreeSizeReductionInter, 0.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 76 NumberOfCodeBlocks, 76 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 72 ConstructedInterpolants, 0 QuantifiedInterpolants, 146 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 524]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0)) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-29 00:59:42,964 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de31a15c-512a-4dbb-8fcc-28d0cd8234f6/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE