./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 02:22:39,216 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 02:22:39,282 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 02:22:39,286 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 02:22:39,287 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 02:22:39,310 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 02:22:39,310 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 02:22:39,311 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 02:22:39,312 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 02:22:39,312 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 02:22:39,313 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 02:22:39,313 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 02:22:39,314 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 02:22:39,314 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 02:22:39,315 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 02:22:39,315 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 02:22:39,316 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 02:22:39,316 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 02:22:39,317 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 02:22:39,317 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 02:22:39,318 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 02:22:39,319 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 02:22:39,319 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 02:22:39,320 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 02:22:39,320 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 02:22:39,321 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 02:22:39,321 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 02:22:39,321 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 02:22:39,322 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 02:22:39,322 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 02:22:39,323 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 02:22:39,323 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:22:39,323 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 02:22:39,323 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 02:22:39,324 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 02:22:39,324 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 02:22:39,324 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 02:22:39,324 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 02:22:39,324 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 02:22:39,325 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 02:22:39,325 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 02:22:39,325 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 02:22:39,325 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 57b9da01117a2ba17baea08a2ca63a083a2352f35e4a8b92086e48b0ce29e696 [2023-11-29 02:22:39,549 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 02:22:39,570 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 02:22:39,573 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 02:22:39,574 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 02:22:39,574 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 02:22:39,576 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-29 02:22:42,329 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 02:22:42,586 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 02:22:42,586 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c [2023-11-29 02:22:42,602 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/data/e0c6b544f/8018b78770c44d8e92be7e18cc9be51e/FLAG5c847455b [2023-11-29 02:22:42,883 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/data/e0c6b544f/8018b78770c44d8e92be7e18cc9be51e [2023-11-29 02:22:42,885 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 02:22:42,886 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 02:22:42,887 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 02:22:42,887 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 02:22:42,892 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 02:22:42,892 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:22:42" (1/1) ... [2023-11-29 02:22:42,893 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a1b9ca9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:42, skipping insertion in model container [2023-11-29 02:22:42,894 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 02:22:42" (1/1) ... [2023-11-29 02:22:42,939 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 02:22:43,162 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-29 02:22:43,166 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:22:43,177 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 02:22:43,185 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-29 02:22:43,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] [2023-11-29 02:22:43,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] [2023-11-29 02:22:43,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] [2023-11-29 02:22:43,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] [2023-11-29 02:22:43,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] [2023-11-29 02:22:43,187 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] [2023-11-29 02:22:43,187 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] [2023-11-29 02:22:43,241 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/sv-benchmarks/c/product-lines/minepump_spec4_product30.cil.c[18223,18236] [2023-11-29 02:22:43,242 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 02:22:43,258 INFO L206 MainTranslator]: Completed translation [2023-11-29 02:22:43,258 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43 WrapperNode [2023-11-29 02:22:43,258 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 02:22:43,259 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 02:22:43,259 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 02:22:43,260 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 02:22:43,265 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,278 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,303 INFO L138 Inliner]: procedures = 55, calls = 100, calls flagged for inlining = 22, calls inlined = 18, statements flattened = 193 [2023-11-29 02:22:43,303 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 02:22:43,304 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 02:22:43,304 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 02:22:43,304 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 02:22:43,313 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,313 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,316 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,331 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 02:22:43,332 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,332 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,337 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,342 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,343 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,345 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,347 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 02:22:43,349 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 02:22:43,349 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 02:22:43,349 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 02:22:43,350 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (1/1) ... [2023-11-29 02:22:43,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 02:22:43,364 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 02:22:43,377 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 02:22:43,381 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 02:22:43,413 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 02:22:43,413 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 02:22:43,413 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 02:22:43,413 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 02:22:43,414 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 02:22:43,414 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 02:22:43,414 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 02:22:43,414 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 02:22:43,414 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 02:22:43,414 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:22:43,414 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:22:43,415 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 02:22:43,415 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 02:22:43,415 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 02:22:43,415 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 02:22:43,415 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 02:22:43,415 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 02:22:43,416 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 02:22:43,416 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 02:22:43,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 02:22:43,496 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 02:22:43,499 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 02:22:43,717 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 02:22:43,784 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 02:22:43,784 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 02:22:43,785 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:22:43 BoogieIcfgContainer [2023-11-29 02:22:43,785 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 02:22:43,788 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 02:22:43,788 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 02:22:43,790 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 02:22:43,790 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 02:22:42" (1/3) ... [2023-11-29 02:22:43,791 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@460eeaa4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:22:43, skipping insertion in model container [2023-11-29 02:22:43,791 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 02:22:43" (2/3) ... [2023-11-29 02:22:43,792 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@460eeaa4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 02:22:43, skipping insertion in model container [2023-11-29 02:22:43,792 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:22:43" (3/3) ... [2023-11-29 02:22:43,793 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product30.cil.c [2023-11-29 02:22:43,807 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 02:22:43,807 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 02:22:43,850 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 02:22:43,856 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@56c59518, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 02:22:43,857 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 02:22:43,860 INFO L276 IsEmpty]: Start isEmpty. Operand has 67 states, 44 states have (on average 1.5454545454545454) internal successors, (68), 52 states have internal predecessors, (68), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 02:22:43,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-29 02:22:43,867 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:43,868 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:43,868 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:43,873 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:43,874 INFO L85 PathProgramCache]: Analyzing trace with hash -1235499760, now seen corresponding path program 1 times [2023-11-29 02:22:43,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:43,881 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1456480120] [2023-11-29 02:22:43,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:43,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:43,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:44,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:44,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1456480120] [2023-11-29 02:22:44,038 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1456480120] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:44,038 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:44,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 02:22:44,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2106065214] [2023-11-29 02:22:44,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:44,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 02:22:44,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:44,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 02:22:44,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:22:44,073 INFO L87 Difference]: Start difference. First operand has 67 states, 44 states have (on average 1.5454545454545454) internal successors, (68), 52 states have internal predecessors, (68), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:44,132 INFO L93 Difference]: Finished difference Result 132 states and 189 transitions. [2023-11-29 02:22:44,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 02:22:44,134 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-29 02:22:44,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:44,143 INFO L225 Difference]: With dead ends: 132 [2023-11-29 02:22:44,143 INFO L226 Difference]: Without dead ends: 62 [2023-11-29 02:22:44,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 02:22:44,152 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:44,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 75 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:22:44,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-11-29 02:22:44,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2023-11-29 02:22:44,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 41 states have (on average 1.4146341463414633) internal successors, (58), 48 states have internal predecessors, (58), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-29 02:22:44,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 83 transitions. [2023-11-29 02:22:44,234 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 83 transitions. Word has length 12 [2023-11-29 02:22:44,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:44,234 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 83 transitions. [2023-11-29 02:22:44,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,235 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 83 transitions. [2023-11-29 02:22:44,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-29 02:22:44,237 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:44,237 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:44,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 02:22:44,237 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:44,238 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:44,238 INFO L85 PathProgramCache]: Analyzing trace with hash -441676594, now seen corresponding path program 1 times [2023-11-29 02:22:44,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:44,239 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714942659] [2023-11-29 02:22:44,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:44,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:44,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:44,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:44,327 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714942659] [2023-11-29 02:22:44,327 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714942659] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:44,328 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:44,328 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 02:22:44,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985532542] [2023-11-29 02:22:44,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:44,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 02:22:44,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:44,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 02:22:44,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:22:44,332 INFO L87 Difference]: Start difference. First operand 62 states and 83 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:44,369 INFO L93 Difference]: Finished difference Result 97 states and 129 transitions. [2023-11-29 02:22:44,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 02:22:44,370 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-29 02:22:44,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:44,372 INFO L225 Difference]: With dead ends: 97 [2023-11-29 02:22:44,372 INFO L226 Difference]: Without dead ends: 54 [2023-11-29 02:22:44,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 02:22:44,374 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 11 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:44,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 109 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:22:44,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-11-29 02:22:44,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2023-11-29 02:22:44,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 36 states have (on average 1.4444444444444444) internal successors, (52), 43 states have internal predecessors, (52), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 02:22:44,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 72 transitions. [2023-11-29 02:22:44,386 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 72 transitions. Word has length 13 [2023-11-29 02:22:44,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:44,386 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 72 transitions. [2023-11-29 02:22:44,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,387 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 72 transitions. [2023-11-29 02:22:44,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-29 02:22:44,388 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:44,388 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:44,388 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 02:22:44,389 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:44,389 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:44,389 INFO L85 PathProgramCache]: Analyzing trace with hash 1237278287, now seen corresponding path program 1 times [2023-11-29 02:22:44,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:44,390 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [633671315] [2023-11-29 02:22:44,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:44,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:44,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:44,489 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:44,490 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [633671315] [2023-11-29 02:22:44,490 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [633671315] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:44,490 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:44,490 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-29 02:22:44,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884597668] [2023-11-29 02:22:44,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:44,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-29 02:22:44,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:44,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-29 02:22:44,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-29 02:22:44,492 INFO L87 Difference]: Start difference. First operand 54 states and 72 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:44,557 INFO L93 Difference]: Finished difference Result 106 states and 143 transitions. [2023-11-29 02:22:44,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-29 02:22:44,558 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-29 02:22:44,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:44,560 INFO L225 Difference]: With dead ends: 106 [2023-11-29 02:22:44,560 INFO L226 Difference]: Without dead ends: 54 [2023-11-29 02:22:44,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-29 02:22:44,562 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 78 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:44,563 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 102 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 02:22:44,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-11-29 02:22:44,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2023-11-29 02:22:44,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 36 states have (on average 1.4166666666666667) internal successors, (51), 43 states have internal predecessors, (51), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-29 02:22:44,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2023-11-29 02:22:44,574 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 16 [2023-11-29 02:22:44,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:44,575 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2023-11-29 02:22:44,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 4 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:44,575 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2023-11-29 02:22:44,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 02:22:44,577 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:44,577 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:44,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 02:22:44,577 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:44,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:44,578 INFO L85 PathProgramCache]: Analyzing trace with hash 2103767466, now seen corresponding path program 1 times [2023-11-29 02:22:44,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:44,579 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66581448] [2023-11-29 02:22:44,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:44,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:44,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:22:44,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:22:44,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:44,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:44,717 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:44,717 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [66581448] [2023-11-29 02:22:44,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [66581448] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:44,718 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:44,718 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 02:22:44,718 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186290507] [2023-11-29 02:22:44,718 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:44,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 02:22:44,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:44,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 02:22:44,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 02:22:44,720 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 02:22:44,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:44,983 INFO L93 Difference]: Finished difference Result 185 states and 257 transitions. [2023-11-29 02:22:44,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-29 02:22:44,984 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-29 02:22:44,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:44,987 INFO L225 Difference]: With dead ends: 185 [2023-11-29 02:22:44,987 INFO L226 Difference]: Without dead ends: 133 [2023-11-29 02:22:44,988 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2023-11-29 02:22:44,989 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 130 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:44,990 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 163 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:22:44,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2023-11-29 02:22:45,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 101. [2023-11-29 02:22:45,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 67 states have (on average 1.4029850746268657) internal successors, (94), 80 states have internal predecessors, (94), 19 states have call successors, (19), 13 states have call predecessors, (19), 14 states have return successors, (21), 12 states have call predecessors, (21), 19 states have call successors, (21) [2023-11-29 02:22:45,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 134 transitions. [2023-11-29 02:22:45,013 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 134 transitions. Word has length 26 [2023-11-29 02:22:45,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:45,014 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 134 transitions. [2023-11-29 02:22:45,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.5) internal successors, (21), 5 states have internal predecessors, (21), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 02:22:45,014 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 134 transitions. [2023-11-29 02:22:45,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-29 02:22:45,016 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:45,016 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:45,017 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 02:22:45,017 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:45,017 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:45,017 INFO L85 PathProgramCache]: Analyzing trace with hash -1085540848, now seen corresponding path program 1 times [2023-11-29 02:22:45,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:45,018 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612606455] [2023-11-29 02:22:45,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:45,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:45,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 02:22:45,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-29 02:22:45,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:22:45,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:45,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:45,171 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612606455] [2023-11-29 02:22:45,171 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612606455] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:45,171 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:45,171 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-29 02:22:45,171 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1623331630] [2023-11-29 02:22:45,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:45,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 02:22:45,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:45,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 02:22:45,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-29 02:22:45,173 INFO L87 Difference]: Start difference. First operand 101 states and 134 transitions. Second operand has 8 states, 8 states have (on average 2.875) internal successors, (23), 6 states have internal predecessors, (23), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:22:45,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:45,735 INFO L93 Difference]: Finished difference Result 355 states and 480 transitions. [2023-11-29 02:22:45,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-11-29 02:22:45,736 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.875) internal successors, (23), 6 states have internal predecessors, (23), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 30 [2023-11-29 02:22:45,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:45,740 INFO L225 Difference]: With dead ends: 355 [2023-11-29 02:22:45,740 INFO L226 Difference]: Without dead ends: 256 [2023-11-29 02:22:45,742 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=119, Invalid=343, Unknown=0, NotChecked=0, Total=462 [2023-11-29 02:22:45,743 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 283 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 311 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 286 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 311 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:45,743 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [286 Valid, 189 Invalid, 446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 311 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-29 02:22:45,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2023-11-29 02:22:45,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 164. [2023-11-29 02:22:45,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 108 states have (on average 1.3888888888888888) internal successors, (150), 130 states have internal predecessors, (150), 33 states have call successors, (33), 20 states have call predecessors, (33), 22 states have return successors, (37), 19 states have call predecessors, (37), 33 states have call successors, (37) [2023-11-29 02:22:45,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 220 transitions. [2023-11-29 02:22:45,783 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 220 transitions. Word has length 30 [2023-11-29 02:22:45,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:45,784 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 220 transitions. [2023-11-29 02:22:45,784 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.875) internal successors, (23), 6 states have internal predecessors, (23), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:22:45,784 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 220 transitions. [2023-11-29 02:22:45,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-29 02:22:45,787 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:45,787 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:45,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 02:22:45,787 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:45,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:45,788 INFO L85 PathProgramCache]: Analyzing trace with hash -1991787755, now seen corresponding path program 1 times [2023-11-29 02:22:45,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:45,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835790441] [2023-11-29 02:22:45,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:45,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:45,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 02:22:45,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-29 02:22:45,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:22:45,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:45,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 02:22:45,846 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:45,846 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835790441] [2023-11-29 02:22:45,847 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [835790441] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 02:22:45,847 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 02:22:45,847 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 02:22:45,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1212350277] [2023-11-29 02:22:45,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 02:22:45,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 02:22:45,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:45,848 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 02:22:45,848 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 02:22:45,849 INFO L87 Difference]: Start difference. First operand 164 states and 220 transitions. Second operand has 5 states, 5 states have (on average 5.0) internal successors, (25), 3 states have internal predecessors, (25), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:22:45,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:45,934 INFO L93 Difference]: Finished difference Result 264 states and 355 transitions. [2023-11-29 02:22:45,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 02:22:45,935 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 3 states have internal predecessors, (25), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2023-11-29 02:22:45,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:45,936 INFO L225 Difference]: With dead ends: 264 [2023-11-29 02:22:45,936 INFO L226 Difference]: Without dead ends: 102 [2023-11-29 02:22:45,937 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 02:22:45,938 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 69 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:45,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 40 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 02:22:45,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2023-11-29 02:22:45,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2023-11-29 02:22:45,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 72 states have (on average 1.25) internal successors, (90), 79 states have internal predecessors, (90), 14 states have call successors, (14), 14 states have call predecessors, (14), 15 states have return successors, (15), 14 states have call predecessors, (15), 14 states have call successors, (15) [2023-11-29 02:22:45,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 119 transitions. [2023-11-29 02:22:45,957 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 119 transitions. Word has length 32 [2023-11-29 02:22:45,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:45,957 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 119 transitions. [2023-11-29 02:22:45,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.0) internal successors, (25), 3 states have internal predecessors, (25), 3 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-29 02:22:45,958 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 119 transitions. [2023-11-29 02:22:45,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-29 02:22:45,959 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 02:22:45,960 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:45,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 02:22:45,960 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 02:22:45,960 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 02:22:45,961 INFO L85 PathProgramCache]: Analyzing trace with hash 122965949, now seen corresponding path program 1 times [2023-11-29 02:22:45,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 02:22:45,961 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328766911] [2023-11-29 02:22:45,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:45,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 02:22:45,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 02:22:46,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 02:22:46,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-29 02:22:46,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:22:46,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-29 02:22:46,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-29 02:22:46,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 02:22:46,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,210 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 02:22:46,210 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 02:22:46,210 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328766911] [2023-11-29 02:22:46,210 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [328766911] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 02:22:46,210 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [682663860] [2023-11-29 02:22:46,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 02:22:46,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 02:22:46,211 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 02:22:46,228 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 02:22:46,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 02:22:46,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 02:22:46,305 INFO L262 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-29 02:22:46,311 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 02:22:46,425 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 23 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 02:22:46,425 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 02:22:46,649 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-29 02:22:46,650 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [682663860] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 02:22:46,650 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 02:22:46,650 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 8] total 16 [2023-11-29 02:22:46,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233184687] [2023-11-29 02:22:46,650 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 02:22:46,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-29 02:22:46,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 02:22:46,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-29 02:22:46,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=184, Unknown=0, NotChecked=0, Total=240 [2023-11-29 02:22:46,653 INFO L87 Difference]: Start difference. First operand 102 states and 119 transitions. Second operand has 16 states, 16 states have (on average 4.875) internal successors, (78), 13 states have internal predecessors, (78), 9 states have call successors, (19), 9 states have call predecessors, (19), 8 states have return successors, (16), 7 states have call predecessors, (16), 9 states have call successors, (16) [2023-11-29 02:22:46,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 02:22:46,891 INFO L93 Difference]: Finished difference Result 135 states and 159 transitions. [2023-11-29 02:22:46,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-29 02:22:46,891 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 4.875) internal successors, (78), 13 states have internal predecessors, (78), 9 states have call successors, (19), 9 states have call predecessors, (19), 8 states have return successors, (16), 7 states have call predecessors, (16), 9 states have call successors, (16) Word has length 58 [2023-11-29 02:22:46,892 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 02:22:46,892 INFO L225 Difference]: With dead ends: 135 [2023-11-29 02:22:46,892 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 02:22:46,893 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 119 SyntacticMatches, 4 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=120, Invalid=300, Unknown=0, NotChecked=0, Total=420 [2023-11-29 02:22:46,894 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 169 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-29 02:22:46,894 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 172 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-29 02:22:46,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 02:22:46,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 02:22:46,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 02:22:46,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 02:22:46,895 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 58 [2023-11-29 02:22:46,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 02:22:46,896 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 02:22:46,896 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 4.875) internal successors, (78), 13 states have internal predecessors, (78), 9 states have call successors, (19), 9 states have call predecessors, (19), 8 states have return successors, (16), 7 states have call predecessors, (16), 9 states have call successors, (16) [2023-11-29 02:22:46,896 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 02:22:46,896 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 02:22:46,898 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 02:22:46,908 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 02:22:47,099 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 02:22:47,101 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 02:22:47,662 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 290 297) no Hoare annotation was computed. [2023-11-29 02:22:47,662 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 290 297) the Hoare annotation is: true [2023-11-29 02:22:47,662 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 206 212) no Hoare annotation was computed. [2023-11-29 02:22:47,662 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 206 212) the Hoare annotation is: true [2023-11-29 02:22:47,663 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 83 94) the Hoare annotation is: true [2023-11-29 02:22:47,663 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2023-11-29 02:22:47,663 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2023-11-29 02:22:47,663 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 817 846) no Hoare annotation was computed. [2023-11-29 02:22:47,663 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2023-11-29 02:22:47,663 INFO L902 garLoopResultBuilder]: At program point L831-1(lines 831 835) the Hoare annotation is: true [2023-11-29 02:22:47,663 INFO L902 garLoopResultBuilder]: At program point L827-2(lines 827 841) the Hoare annotation is: true [2023-11-29 02:22:47,663 INFO L902 garLoopResultBuilder]: At program point L823(line 823) the Hoare annotation is: true [2023-11-29 02:22:47,664 INFO L899 garLoopResultBuilder]: For program point L823-1(line 823) no Hoare annotation was computed. [2023-11-29 02:22:47,664 INFO L899 garLoopResultBuilder]: For program point L842(lines 817 846) no Hoare annotation was computed. [2023-11-29 02:22:47,664 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 817 846) the Hoare annotation is: true [2023-11-29 02:22:47,664 INFO L899 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2023-11-29 02:22:47,664 INFO L895 garLoopResultBuilder]: At program point L254(line 254) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-29 02:22:47,664 INFO L895 garLoopResultBuilder]: At program point L250(line 250) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-29 02:22:47,665 INFO L895 garLoopResultBuilder]: At program point L246(line 246) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-29 02:22:47,665 INFO L899 garLoopResultBuilder]: For program point L246-1(line 246) no Hoare annotation was computed. [2023-11-29 02:22:47,665 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1)) .cse2))) [2023-11-29 02:22:47,665 INFO L899 garLoopResultBuilder]: For program point L259-1(lines 240 264) no Hoare annotation was computed. [2023-11-29 02:22:47,665 INFO L899 garLoopResultBuilder]: For program point L193-1(lines 193 199) no Hoare annotation was computed. [2023-11-29 02:22:47,665 INFO L899 garLoopResultBuilder]: For program point L160(lines 160 166) no Hoare annotation was computed. [2023-11-29 02:22:47,665 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 169) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L156-1(lines 148 172) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L954(line 954) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 185 204) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 256) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 261) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 182 205) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1)) .cse2))) [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2023-11-29 02:22:47,666 INFO L899 garLoopResultBuilder]: For program point L63-2(lines 59 70) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 182 205) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 954) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L895 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3))) [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point L444(lines 383 448) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point L403(lines 403 409) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point L403-1(lines 403 409) no Hoare annotation was computed. [2023-11-29 02:22:47,667 INFO L895 garLoopResultBuilder]: At program point L441(lines 392 442) the Hoare annotation is: false [2023-11-29 02:22:47,667 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 02:22:47,668 INFO L899 garLoopResultBuilder]: For program point L413(lines 413 419) no Hoare annotation was computed. [2023-11-29 02:22:47,668 INFO L899 garLoopResultBuilder]: For program point L413-1(lines 413 419) no Hoare annotation was computed. [2023-11-29 02:22:47,668 INFO L895 garLoopResultBuilder]: At program point L438(lines 393 440) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3))) [2023-11-29 02:22:47,668 INFO L895 garLoopResultBuilder]: At program point L405(line 405) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3))) [2023-11-29 02:22:47,668 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 02:22:47,668 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 908) no Hoare annotation was computed. [2023-11-29 02:22:47,668 INFO L899 garLoopResultBuilder]: For program point L901-2(lines 901 908) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 435) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L895 garLoopResultBuilder]: At program point L431-2(lines 423 436) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~9#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3))) [2023-11-29 02:22:47,669 INFO L899 garLoopResultBuilder]: For program point L394(lines 393 440) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 436) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2023-11-29 02:22:47,669 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 71 82) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)))) [2023-11-29 02:22:47,670 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 214 238) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2023-11-29 02:22:47,670 INFO L895 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 (< ~waterLevel~0 2) .cse1))) [2023-11-29 02:22:47,670 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 (< ~waterLevel~0 2) .cse1))) [2023-11-29 02:22:47,670 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 230) no Hoare annotation was computed. [2023-11-29 02:22:47,670 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 235) no Hoare annotation was computed. [2023-11-29 02:22:47,670 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 214 238) no Hoare annotation was computed. [2023-11-29 02:22:47,670 INFO L899 garLoopResultBuilder]: For program point L363(lines 363 367) no Hoare annotation was computed. [2023-11-29 02:22:47,670 INFO L899 garLoopResultBuilder]: For program point L363-2(lines 363 367) no Hoare annotation was computed. [2023-11-29 02:22:47,671 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2023-11-29 02:22:47,671 INFO L899 garLoopResultBuilder]: For program point L233-1(lines 214 238) no Hoare annotation was computed. [2023-11-29 02:22:47,671 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 298 308) no Hoare annotation was computed. [2023-11-29 02:22:47,671 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 298 308) the Hoare annotation is: true [2023-11-29 02:22:47,673 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-29 02:22:47,675 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 02:22:47,687 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 02:22:47 BoogieIcfgContainer [2023-11-29 02:22:47,687 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 02:22:47,688 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 02:22:47,688 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 02:22:47,688 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 02:22:47,689 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 02:22:43" (3/4) ... [2023-11-29 02:22:47,691 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 02:22:47,694 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 02:22:47,694 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 02:22:47,694 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 02:22:47,694 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 02:22:47,695 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 02:22:47,695 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 02:22:47,695 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-29 02:22:47,695 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 02:22:47,702 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 33 nodes and edges [2023-11-29 02:22:47,703 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 02:22:47,704 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 02:22:47,704 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:22:47,704 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 02:22:47,816 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 02:22:47,816 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 02:22:47,817 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 02:22:47,817 INFO L158 Benchmark]: Toolchain (without parser) took 4931.06ms. Allocated memory was 159.4MB in the beginning and 209.7MB in the end (delta: 50.3MB). Free memory was 125.0MB in the beginning and 95.6MB in the end (delta: 29.4MB). Peak memory consumption was 81.4MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,818 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 159.4MB. Free memory is still 131.8MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 02:22:47,818 INFO L158 Benchmark]: CACSL2BoogieTranslator took 371.48ms. Allocated memory is still 159.4MB. Free memory was 125.0MB in the beginning and 105.6MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,819 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.33ms. Allocated memory is still 159.4MB. Free memory was 105.6MB in the beginning and 103.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,819 INFO L158 Benchmark]: Boogie Preprocessor took 43.72ms. Allocated memory is still 159.4MB. Free memory was 103.5MB in the beginning and 101.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,819 INFO L158 Benchmark]: RCFGBuilder took 436.45ms. Allocated memory is still 159.4MB. Free memory was 100.8MB in the beginning and 79.8MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,820 INFO L158 Benchmark]: TraceAbstraction took 3899.92ms. Allocated memory was 159.4MB in the beginning and 209.7MB in the end (delta: 50.3MB). Free memory was 78.9MB in the beginning and 103.0MB in the end (delta: -24.1MB). Peak memory consumption was 28.9MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,820 INFO L158 Benchmark]: Witness Printer took 128.54ms. Allocated memory is still 209.7MB. Free memory was 103.0MB in the beginning and 95.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 02:22:47,823 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 159.4MB. Free memory is still 131.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 371.48ms. Allocated memory is still 159.4MB. Free memory was 125.0MB in the beginning and 105.6MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.33ms. Allocated memory is still 159.4MB. Free memory was 105.6MB in the beginning and 103.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.72ms. Allocated memory is still 159.4MB. Free memory was 103.5MB in the beginning and 101.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 436.45ms. Allocated memory is still 159.4MB. Free memory was 100.8MB in the beginning and 79.8MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 3899.92ms. Allocated memory was 159.4MB in the beginning and 209.7MB in the end (delta: 50.3MB). Free memory was 78.9MB in the beginning and 103.0MB in the end (delta: -24.1MB). Peak memory consumption was 28.9MB. Max. memory is 16.1GB. * Witness Printer took 128.54ms. Allocated memory is still 209.7MB. Free memory was 103.0MB in the beginning and 95.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 145]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [145] - GenericResultAtLocation [Line: 173]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [173] - GenericResultAtLocation [Line: 381]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [381] - GenericResultAtLocation [Line: 449]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [449] - GenericResultAtLocation [Line: 815]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [815] - GenericResultAtLocation [Line: 914]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [914] - GenericResultAtLocation [Line: 949]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [949] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 954]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 67 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.8s, OverallIterations: 7, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 753 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 740 mSDsluCounter, 850 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 533 mSDsCounter, 268 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 813 IncrementalHoareTripleChecker+Invalid, 1081 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 268 mSolverCounterUnsat, 317 mSDtfsCounter, 813 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 210 GetRequests, 149 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 160 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=164occurred in iteration=5, InterpolantAutomatonStates: 54, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 124 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 261 PreInvPairs, 271 NumberOfFragments, 435 HoareAnnotationTreeSize, 261 FomulaSimplifications, 512 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 23 FomulaSimplificationsInter, 293 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 245 NumberOfCodeBlocks, 245 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 294 ConstructedInterpolants, 0 QuantifiedInterpolants, 720 SizeOfPredicates, 0 NumberOfNonLiveVariables, 225 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 9 InterpolantComputations, 6 PerfectInterpolantSequences, 55/78 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 393]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (2 <= waterLevel)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel == 1)) && !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-29 02:22:47,840 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_45a73149-48e3-4384-9ac4-df2afac4a81c/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE