./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 861f07fa59cb0cfcece09c1a4e6ddfbbabbcb5606dbdc5d8efc7c0dfaa196551 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 20:32:06,165 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 20:32:06,286 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 20:32:06,295 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 20:32:06,296 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 20:32:06,340 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 20:32:06,341 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 20:32:06,341 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 20:32:06,342 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 20:32:06,347 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 20:32:06,348 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 20:32:06,348 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 20:32:06,349 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 20:32:06,351 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 20:32:06,351 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 20:32:06,351 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 20:32:06,352 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 20:32:06,352 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 20:32:06,353 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 20:32:06,353 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 20:32:06,354 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 20:32:06,354 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 20:32:06,355 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 20:32:06,356 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 20:32:06,356 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 20:32:06,357 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 20:32:06,357 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 20:32:06,358 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 20:32:06,358 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 20:32:06,359 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 20:32:06,360 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 20:32:06,369 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 20:32:06,370 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 20:32:06,371 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 20:32:06,371 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 20:32:06,371 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 20:32:06,372 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 20:32:06,373 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 20:32:06,373 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 20:32:06,373 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 20:32:06,374 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 20:32:06,374 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 20:32:06,375 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 20:32:06,375 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 20:32:06,376 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 20:32:06,376 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 20:32:06,376 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 20:32:06,376 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 861f07fa59cb0cfcece09c1a4e6ddfbbabbcb5606dbdc5d8efc7c0dfaa196551 [2023-11-23 20:32:06,715 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 20:32:06,745 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 20:32:06,748 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 20:32:06,750 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 20:32:06,751 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 20:32:06,752 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c [2023-11-23 20:32:10,076 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 20:32:10,507 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 20:32:10,511 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c [2023-11-23 20:32:10,531 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/data/12b732c70/f58f21ef4a4e4a1ea3c409fdc900c345/FLAG50a47e1f0 [2023-11-23 20:32:10,549 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/data/12b732c70/f58f21ef4a4e4a1ea3c409fdc900c345 [2023-11-23 20:32:10,554 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 20:32:10,556 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 20:32:10,562 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 20:32:10,562 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 20:32:10,568 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 20:32:10,569 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 08:32:10" (1/1) ... [2023-11-23 20:32:10,570 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4a18447f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:10, skipping insertion in model container [2023-11-23 20:32:10,571 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 08:32:10" (1/1) ... [2023-11-23 20:32:10,641 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 20:32:10,954 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c[14834,14847] [2023-11-23 20:32:10,992 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 20:32:11,008 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 20:32:11,017 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-23 20:32:11,019 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] [2023-11-23 20:32:11,019 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [511] [2023-11-23 20:32:11,019 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [685] [2023-11-23 20:32:11,020 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [694] [2023-11-23 20:32:11,020 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [762] [2023-11-23 20:32:11,020 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [861] [2023-11-23 20:32:11,020 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [896] [2023-11-23 20:32:11,095 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/sv-benchmarks/c/product-lines/minepump_spec4_product19.cil.c[14834,14847] [2023-11-23 20:32:11,111 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 20:32:11,137 INFO L206 MainTranslator]: Completed translation [2023-11-23 20:32:11,138 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11 WrapperNode [2023-11-23 20:32:11,138 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 20:32:11,139 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 20:32:11,140 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 20:32:11,140 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 20:32:11,148 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,164 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,194 INFO L138 Inliner]: procedures = 53, calls = 95, calls flagged for inlining = 21, calls inlined = 17, statements flattened = 169 [2023-11-23 20:32:11,194 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 20:32:11,195 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 20:32:11,195 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 20:32:11,195 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 20:32:11,205 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,206 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,208 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,209 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,214 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,219 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,221 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,222 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,225 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 20:32:11,227 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 20:32:11,227 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 20:32:11,227 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 20:32:11,228 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (1/1) ... [2023-11-23 20:32:11,235 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 20:32:11,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 20:32:11,287 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 20:32:11,317 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 20:32:11,338 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 20:32:11,339 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 20:32:11,339 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 20:32:11,339 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 20:32:11,339 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 20:32:11,339 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 20:32:11,339 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 20:32:11,340 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 20:32:11,341 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 20:32:11,341 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 20:32:11,341 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 20:32:11,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 20:32:11,342 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 20:32:11,342 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 20:32:11,343 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 20:32:11,344 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 20:32:11,427 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 20:32:11,430 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 20:32:11,739 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 20:32:11,861 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 20:32:11,861 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 20:32:11,863 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:32:11 BoogieIcfgContainer [2023-11-23 20:32:11,863 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 20:32:11,867 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 20:32:11,867 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 20:32:11,871 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 20:32:11,871 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 08:32:10" (1/3) ... [2023-11-23 20:32:11,872 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54f1727b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 08:32:11, skipping insertion in model container [2023-11-23 20:32:11,872 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:32:11" (2/3) ... [2023-11-23 20:32:11,873 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54f1727b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 08:32:11, skipping insertion in model container [2023-11-23 20:32:11,873 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:32:11" (3/3) ... [2023-11-23 20:32:11,874 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product19.cil.c [2023-11-23 20:32:11,896 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 20:32:11,896 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 20:32:11,947 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 20:32:11,955 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@181bee1b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 20:32:11,955 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 20:32:11,960 INFO L276 IsEmpty]: Start isEmpty. Operand has 52 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 41 states have internal predecessors, (50), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-23 20:32:11,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-23 20:32:11,969 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:32:11,970 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:32:11,971 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:32:11,977 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:32:11,977 INFO L85 PathProgramCache]: Analyzing trace with hash -952800988, now seen corresponding path program 1 times [2023-11-23 20:32:11,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:32:11,988 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242146111] [2023-11-23 20:32:11,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:32:11,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:32:12,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:32:12,225 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:32:12,226 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:32:12,226 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242146111] [2023-11-23 20:32:12,227 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242146111] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:32:12,228 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:32:12,228 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 20:32:12,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610779053] [2023-11-23 20:32:12,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:32:12,235 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 20:32:12,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:32:12,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 20:32:12,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 20:32:12,273 INFO L87 Difference]: Start difference. First operand has 52 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 41 states have internal predecessors, (50), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:12,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:32:12,369 INFO L93 Difference]: Finished difference Result 102 states and 141 transitions. [2023-11-23 20:32:12,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 20:32:12,372 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-23 20:32:12,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:32:12,382 INFO L225 Difference]: With dead ends: 102 [2023-11-23 20:32:12,383 INFO L226 Difference]: Without dead ends: 47 [2023-11-23 20:32:12,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 20:32:12,391 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 52 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:32:12,392 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 52 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:32:12,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2023-11-23 20:32:12,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2023-11-23 20:32:12,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 37 states have internal predecessors, (42), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-23 20:32:12,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 61 transitions. [2023-11-23 20:32:12,465 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 61 transitions. Word has length 12 [2023-11-23 20:32:12,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:32:12,466 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 61 transitions. [2023-11-23 20:32:12,466 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:12,466 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 61 transitions. [2023-11-23 20:32:12,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-23 20:32:12,469 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:32:12,469 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:32:12,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 20:32:12,470 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:32:12,471 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:32:12,471 INFO L85 PathProgramCache]: Analyzing trace with hash -16343948, now seen corresponding path program 1 times [2023-11-23 20:32:12,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:32:12,472 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [520597646] [2023-11-23 20:32:12,499 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:32:12,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:32:12,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:32:12,642 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:32:12,642 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:32:12,643 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [520597646] [2023-11-23 20:32:12,643 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [520597646] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:32:12,643 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:32:12,644 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 20:32:12,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1203807672] [2023-11-23 20:32:12,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:32:12,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 20:32:12,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:32:12,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 20:32:12,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 20:32:12,648 INFO L87 Difference]: Start difference. First operand 47 states and 61 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:12,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:32:12,692 INFO L93 Difference]: Finished difference Result 66 states and 84 transitions. [2023-11-23 20:32:12,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 20:32:12,693 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-23 20:32:12,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:32:12,695 INFO L225 Difference]: With dead ends: 66 [2023-11-23 20:32:12,695 INFO L226 Difference]: Without dead ends: 39 [2023-11-23 20:32:12,696 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 20:32:12,698 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 14 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 20:32:12,699 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 59 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 20:32:12,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2023-11-23 20:32:12,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2023-11-23 20:32:12,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 26 states have (on average 1.3846153846153846) internal successors, (36), 32 states have internal predecessors, (36), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-23 20:32:12,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 50 transitions. [2023-11-23 20:32:12,709 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 50 transitions. Word has length 13 [2023-11-23 20:32:12,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:32:12,710 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 50 transitions. [2023-11-23 20:32:12,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:12,710 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 50 transitions. [2023-11-23 20:32:12,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 20:32:12,712 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:32:12,712 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:32:12,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 20:32:12,713 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:32:12,714 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:32:12,714 INFO L85 PathProgramCache]: Analyzing trace with hash 2039208838, now seen corresponding path program 1 times [2023-11-23 20:32:12,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:32:12,715 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238011785] [2023-11-23 20:32:12,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:32:12,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:32:12,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:32:12,849 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:32:12,850 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:32:12,850 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238011785] [2023-11-23 20:32:12,850 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238011785] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:32:12,851 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:32:12,851 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 20:32:12,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1601646017] [2023-11-23 20:32:12,851 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:32:12,852 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 20:32:12,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:32:12,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 20:32:12,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 20:32:12,854 INFO L87 Difference]: Start difference. First operand 39 states and 50 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:12,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:32:12,995 INFO L93 Difference]: Finished difference Result 119 states and 160 transitions. [2023-11-23 20:32:12,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 20:32:12,996 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-23 20:32:12,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:32:12,999 INFO L225 Difference]: With dead ends: 119 [2023-11-23 20:32:12,999 INFO L226 Difference]: Without dead ends: 82 [2023-11-23 20:32:13,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 20:32:13,002 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 63 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:32:13,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 106 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:32:13,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2023-11-23 20:32:13,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 65. [2023-11-23 20:32:13,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 44 states have (on average 1.3863636363636365) internal successors, (61), 53 states have internal predecessors, (61), 11 states have call successors, (11), 9 states have call predecessors, (11), 9 states have return successors, (12), 8 states have call predecessors, (12), 11 states have call successors, (12) [2023-11-23 20:32:13,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 84 transitions. [2023-11-23 20:32:13,023 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 84 transitions. Word has length 16 [2023-11-23 20:32:13,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:32:13,024 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 84 transitions. [2023-11-23 20:32:13,024 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:13,025 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2023-11-23 20:32:13,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 20:32:13,026 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:32:13,026 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:32:13,027 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 20:32:13,027 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:32:13,028 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:32:13,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1949413255, now seen corresponding path program 1 times [2023-11-23 20:32:13,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:32:13,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [946053788] [2023-11-23 20:32:13,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:32:13,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:32:13,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:32:13,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:32:13,357 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:32:13,357 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [946053788] [2023-11-23 20:32:13,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [946053788] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:32:13,359 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:32:13,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 20:32:13,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289229967] [2023-11-23 20:32:13,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:32:13,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 20:32:13,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:32:13,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 20:32:13,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-23 20:32:13,363 INFO L87 Difference]: Start difference. First operand 65 states and 84 transitions. Second operand has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:13,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:32:13,500 INFO L93 Difference]: Finished difference Result 176 states and 234 transitions. [2023-11-23 20:32:13,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 20:32:13,501 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-23 20:32:13,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:32:13,503 INFO L225 Difference]: With dead ends: 176 [2023-11-23 20:32:13,504 INFO L226 Difference]: Without dead ends: 113 [2023-11-23 20:32:13,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2023-11-23 20:32:13,507 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 20 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:32:13,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 142 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:32:13,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2023-11-23 20:32:13,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 108. [2023-11-23 20:32:13,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 77 states have (on average 1.3376623376623376) internal successors, (103), 88 states have internal predecessors, (103), 16 states have call successors, (16), 14 states have call predecessors, (16), 14 states have return successors, (18), 13 states have call predecessors, (18), 16 states have call successors, (18) [2023-11-23 20:32:13,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 137 transitions. [2023-11-23 20:32:13,533 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 137 transitions. Word has length 19 [2023-11-23 20:32:13,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:32:13,533 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 137 transitions. [2023-11-23 20:32:13,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:13,534 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 137 transitions. [2023-11-23 20:32:13,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-23 20:32:13,536 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:32:13,536 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:32:13,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 20:32:13,536 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:32:13,537 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:32:13,537 INFO L85 PathProgramCache]: Analyzing trace with hash 14326505, now seen corresponding path program 1 times [2023-11-23 20:32:13,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:32:13,538 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690296728] [2023-11-23 20:32:13,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:32:13,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:32:13,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:32:13,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:32:13,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:32:13,869 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690296728] [2023-11-23 20:32:13,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690296728] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:32:13,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:32:13,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-23 20:32:13,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223368050] [2023-11-23 20:32:13,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:32:13,873 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 20:32:13,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:32:13,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 20:32:13,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-23 20:32:13,875 INFO L87 Difference]: Start difference. First operand 108 states and 137 transitions. Second operand has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 20:32:14,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:32:14,077 INFO L93 Difference]: Finished difference Result 164 states and 211 transitions. [2023-11-23 20:32:14,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 20:32:14,078 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 22 [2023-11-23 20:32:14,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:32:14,078 INFO L225 Difference]: With dead ends: 164 [2023-11-23 20:32:14,078 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 20:32:14,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2023-11-23 20:32:14,091 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 55 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:32:14,092 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 153 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:32:14,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 20:32:14,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 20:32:14,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:32:14,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 20:32:14,096 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 22 [2023-11-23 20:32:14,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:32:14,097 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 20:32:14,097 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 20:32:14,097 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 20:32:14,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 20:32:14,100 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 20:32:14,101 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 20:32:14,103 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 20:32:14,617 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 587 594) no Hoare annotation was computed. [2023-11-23 20:32:14,617 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 587 594) the Hoare annotation is: true [2023-11-23 20:32:14,617 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 546 552) no Hoare annotation was computed. [2023-11-23 20:32:14,617 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 546 552) the Hoare annotation is: true [2023-11-23 20:32:14,618 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 449 460) the Hoare annotation is: true [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 449 460) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point L770-1(line 770) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 764 793) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point L789(lines 764 793) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point L785(line 785) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 782) no Hoare annotation was computed. [2023-11-23 20:32:14,618 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 764 793) the Hoare annotation is: true [2023-11-23 20:32:14,619 INFO L902 garLoopResultBuilder]: At program point L778-1(lines 778 782) the Hoare annotation is: true [2023-11-23 20:32:14,619 INFO L902 garLoopResultBuilder]: At program point L774-2(lines 774 788) the Hoare annotation is: true [2023-11-23 20:32:14,619 INFO L902 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: true [2023-11-23 20:32:14,619 INFO L895 garLoopResultBuilder]: At program point L568(line 568) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 20:32:14,619 INFO L895 garLoopResultBuilder]: At program point L564(line 564) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 20:32:14,620 INFO L895 garLoopResultBuilder]: At program point L573(line 573) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or .cse2 (< |old(~waterLevel~0)| 2) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1)))) [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L573-1(lines 554 578) no Hoare annotation was computed. [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L533-1(lines 533 539) no Hoare annotation was computed. [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L562(lines 562 570) no Hoare annotation was computed. [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L690(line 690) no Hoare annotation was computed. [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 575) no Hoare annotation was computed. [2023-11-23 20:32:14,620 INFO L899 garLoopResultBuilder]: For program point L909(lines 909 915) no Hoare annotation was computed. [2023-11-23 20:32:14,621 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 522 545) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-23 20:32:14,621 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 918) no Hoare annotation was computed. [2023-11-23 20:32:14,621 INFO L899 garLoopResultBuilder]: For program point L905-1(lines 897 921) no Hoare annotation was computed. [2023-11-23 20:32:14,621 INFO L899 garLoopResultBuilder]: For program point L526-1(lines 525 544) no Hoare annotation was computed. [2023-11-23 20:32:14,621 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 522 545) no Hoare annotation was computed. [2023-11-23 20:32:14,621 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 690) no Hoare annotation was computed. [2023-11-23 20:32:14,622 INFO L895 garLoopResultBuilder]: At program point L754(lines 705 755) the Hoare annotation is: false [2023-11-23 20:32:14,622 INFO L899 garLoopResultBuilder]: For program point L742(lines 742 748) no Hoare annotation was computed. [2023-11-23 20:32:14,622 INFO L895 garLoopResultBuilder]: At program point L676(line 676) the Hoare annotation is: false [2023-11-23 20:32:14,622 INFO L895 garLoopResultBuilder]: At program point L742-2(lines 736 749) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:32:14,622 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 732) no Hoare annotation was computed. [2023-11-23 20:32:14,622 INFO L899 garLoopResultBuilder]: For program point L726-1(lines 726 732) no Hoare annotation was computed. [2023-11-23 20:32:14,623 INFO L895 garLoopResultBuilder]: At program point L751(lines 706 753) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:32:14,623 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:32:14,623 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 20:32:14,623 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 20:32:14,623 INFO L899 garLoopResultBuilder]: For program point L707(lines 706 753) no Hoare annotation was computed. [2023-11-23 20:32:14,623 INFO L899 garLoopResultBuilder]: For program point L674(lines 674 680) no Hoare annotation was computed. [2023-11-23 20:32:14,623 INFO L899 garLoopResultBuilder]: For program point L674-1(lines 674 680) no Hoare annotation was computed. [2023-11-23 20:32:14,624 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 749) no Hoare annotation was computed. [2023-11-23 20:32:14,624 INFO L895 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:32:14,624 INFO L899 garLoopResultBuilder]: For program point L757(lines 696 761) no Hoare annotation was computed. [2023-11-23 20:32:14,629 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 855) no Hoare annotation was computed. [2023-11-23 20:32:14,629 INFO L899 garLoopResultBuilder]: For program point L848-2(lines 848 855) no Hoare annotation was computed. [2023-11-23 20:32:14,630 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2023-11-23 20:32:14,630 INFO L899 garLoopResultBuilder]: For program point L716-1(lines 716 722) no Hoare annotation was computed. [2023-11-23 20:32:14,630 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 437 448) no Hoare annotation was computed. [2023-11-23 20:32:14,630 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 437 448) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-23 20:32:14,633 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2023-11-23 20:32:14,636 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 20:32:14,658 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 08:32:14 BoogieIcfgContainer [2023-11-23 20:32:14,658 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 20:32:14,659 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 20:32:14,659 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 20:32:14,660 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 20:32:14,660 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:32:11" (3/4) ... [2023-11-23 20:32:14,664 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 20:32:14,669 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 20:32:14,670 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 20:32:14,670 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 20:32:14,670 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 20:32:14,670 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 20:32:14,671 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 20:32:14,685 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 37 nodes and edges [2023-11-23 20:32:14,686 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-23 20:32:14,687 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 20:32:14,688 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 20:32:14,689 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 20:32:14,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-23 20:32:14,777 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-23 20:32:14,836 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 20:32:14,836 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 20:32:14,837 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 20:32:14,837 INFO L158 Benchmark]: Toolchain (without parser) took 4281.16ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 123.6MB in the beginning and 106.6MB in the end (delta: 17.0MB). Peak memory consumption was 48.4MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,838 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 157.3MB. Free memory is still 125.4MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 20:32:14,838 INFO L158 Benchmark]: CACSL2BoogieTranslator took 576.65ms. Allocated memory is still 157.3MB. Free memory was 123.6MB in the beginning and 104.7MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,839 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.87ms. Allocated memory is still 157.3MB. Free memory was 104.7MB in the beginning and 102.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,839 INFO L158 Benchmark]: Boogie Preprocessor took 30.99ms. Allocated memory is still 157.3MB. Free memory was 102.6MB in the beginning and 101.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,840 INFO L158 Benchmark]: RCFGBuilder took 637.08ms. Allocated memory is still 157.3MB. Free memory was 101.0MB in the beginning and 77.9MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,840 INFO L158 Benchmark]: TraceAbstraction took 2791.59ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 77.4MB in the beginning and 112.9MB in the end (delta: -35.4MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 20:32:14,841 INFO L158 Benchmark]: Witness Printer took 177.77ms. Allocated memory is still 188.7MB. Free memory was 112.9MB in the beginning and 106.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-23 20:32:14,846 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 157.3MB. Free memory is still 125.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 576.65ms. Allocated memory is still 157.3MB. Free memory was 123.6MB in the beginning and 104.7MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.87ms. Allocated memory is still 157.3MB. Free memory was 104.7MB in the beginning and 102.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.99ms. Allocated memory is still 157.3MB. Free memory was 102.6MB in the beginning and 101.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 637.08ms. Allocated memory is still 157.3MB. Free memory was 101.0MB in the beginning and 77.9MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 2791.59ms. Allocated memory was 157.3MB in the beginning and 188.7MB in the end (delta: 31.5MB). Free memory was 77.4MB in the beginning and 112.9MB in the end (delta: -35.4MB). There was no memory consumed. Max. memory is 16.1GB. * Witness Printer took 177.77ms. Allocated memory is still 188.7MB. Free memory was 112.9MB in the beginning and 106.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] - GenericResultAtLocation [Line: 511]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [511] - GenericResultAtLocation [Line: 685]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [685] - GenericResultAtLocation [Line: 694]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [694] - GenericResultAtLocation [Line: 762]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [762] - GenericResultAtLocation [Line: 861]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [861] - GenericResultAtLocation [Line: 896]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [896] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 690]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 52 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.7s, OverallIterations: 5, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 157 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 152 mSDsluCounter, 512 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 308 mSDsCounter, 30 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 285 IncrementalHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 30 mSolverCounterUnsat, 204 mSDtfsCounter, 285 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 25 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=108occurred in iteration=4, InterpolantAutomatonStates: 19, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 5 MinimizatonAttempts, 22 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 113 PreInvPairs, 129 NumberOfFragments, 225 HoareAnnotationTreeSize, 113 FomulaSimplifications, 100 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 18 FomulaSimplificationsInter, 570 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 82 NumberOfCodeBlocks, 82 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 77 ConstructedInterpolants, 0 QuantifiedInterpolants, 300 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) RESULT: Ultimate proved your program to be correct! [2023-11-23 20:32:14,894 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9d876e9e-b6dc-4451-85bc-65fbae1046e0/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE