./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 707a68b5ae5daf5497cfeaeef06b8e51a77f018401ec73338bde503119bd77ef --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 20:36:14,624 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 20:36:14,699 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-Reach-32bit-Taipan_Default.epf [2023-11-23 20:36:14,705 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 20:36:14,706 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 20:36:14,752 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 20:36:14,752 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 20:36:14,753 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 20:36:14,754 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 20:36:14,762 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 20:36:14,762 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 20:36:14,764 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 20:36:14,764 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 20:36:14,766 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 20:36:14,766 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 20:36:14,767 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 20:36:14,767 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 20:36:14,768 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 20:36:14,768 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 20:36:14,769 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 20:36:14,769 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 20:36:14,788 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 20:36:14,788 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 20:36:14,789 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-23 20:36:14,789 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 20:36:14,790 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 20:36:14,790 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 20:36:14,790 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 20:36:14,791 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-23 20:36:14,791 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 20:36:14,791 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-23 20:36:14,792 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 20:36:14,792 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-23 20:36:14,792 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 20:36:14,792 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 20:36:14,792 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 20:36:14,793 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 20:36:14,793 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 20:36:14,793 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 20:36:14,793 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 20:36:14,793 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-23 20:36:14,795 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 20:36:14,795 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 20:36:14,795 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 20:36:14,795 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-23 20:36:14,795 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 20:36:14,796 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 20:36:14,796 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 707a68b5ae5daf5497cfeaeef06b8e51a77f018401ec73338bde503119bd77ef [2023-11-23 20:36:15,090 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 20:36:15,116 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 20:36:15,118 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 20:36:15,121 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 20:36:15,122 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 20:36:15,123 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c [2023-11-23 20:36:18,200 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 20:36:18,484 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 20:36:18,485 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c [2023-11-23 20:36:18,503 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/data/728dd32b0/2940236008564f2180227b410e25565d/FLAG067f5a772 [2023-11-23 20:36:18,516 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/data/728dd32b0/2940236008564f2180227b410e25565d [2023-11-23 20:36:18,519 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 20:36:18,521 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 20:36:18,522 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 20:36:18,522 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 20:36:18,528 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 20:36:18,529 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 08:36:18" (1/1) ... [2023-11-23 20:36:18,530 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@38096f79 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:18, skipping insertion in model container [2023-11-23 20:36:18,531 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 08:36:18" (1/1) ... [2023-11-23 20:36:18,584 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 20:36:18,771 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c[2897,2910] [2023-11-23 20:36:18,893 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 20:36:18,905 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 20:36:18,916 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] [2023-11-23 20:36:18,917 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [153] [2023-11-23 20:36:18,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [162] [2023-11-23 20:36:18,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [190] [2023-11-23 20:36:18,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [283] [2023-11-23 20:36:18,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [351] [2023-11-23 20:36:18,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [538] [2023-11-23 20:36:18,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [573] [2023-11-23 20:36:18,929 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/sv-benchmarks/c/product-lines/minepump_spec4_product27.cil.c[2897,2910] [2023-11-23 20:36:18,984 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 20:36:19,014 INFO L206 MainTranslator]: Completed translation [2023-11-23 20:36:19,015 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19 WrapperNode [2023-11-23 20:36:19,015 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 20:36:19,016 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 20:36:19,016 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 20:36:19,017 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 20:36:19,024 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,037 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,065 INFO L138 Inliner]: procedures = 54, calls = 97, calls flagged for inlining = 23, calls inlined = 17, statements flattened = 169 [2023-11-23 20:36:19,066 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 20:36:19,066 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 20:36:19,067 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 20:36:19,067 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 20:36:19,077 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,078 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,080 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,080 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,088 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,106 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,112 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,113 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,126 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 20:36:19,127 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 20:36:19,127 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 20:36:19,128 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 20:36:19,129 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (1/1) ... [2023-11-23 20:36:19,138 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 20:36:19,152 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 20:36:19,170 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 20:36:19,197 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 20:36:19,224 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 20:36:19,233 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-23 20:36:19,233 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-23 20:36:19,233 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-23 20:36:19,234 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-23 20:36:19,245 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-23 20:36:19,245 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-23 20:36:19,245 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-23 20:36:19,246 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-23 20:36:19,246 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-23 20:36:19,246 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-23 20:36:19,246 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-23 20:36:19,247 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-23 20:36:19,247 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-23 20:36:19,261 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 20:36:19,261 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 20:36:19,356 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 20:36:19,358 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 20:36:19,605 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 20:36:19,760 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 20:36:19,761 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 20:36:19,763 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:36:19 BoogieIcfgContainer [2023-11-23 20:36:19,763 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 20:36:19,766 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 20:36:19,766 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 20:36:19,769 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 20:36:19,770 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 08:36:18" (1/3) ... [2023-11-23 20:36:19,771 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@150429de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 08:36:19, skipping insertion in model container [2023-11-23 20:36:19,771 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 08:36:19" (2/3) ... [2023-11-23 20:36:19,771 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@150429de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 08:36:19, skipping insertion in model container [2023-11-23 20:36:19,771 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:36:19" (3/3) ... [2023-11-23 20:36:19,773 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product27.cil.c [2023-11-23 20:36:19,792 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 20:36:19,793 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-23 20:36:19,836 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 20:36:19,842 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@48161dc2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 20:36:19,843 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-23 20:36:19,846 INFO L276 IsEmpty]: Start isEmpty. Operand has 52 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 41 states have internal predecessors, (50), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-23 20:36:19,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-23 20:36:19,856 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:36:19,857 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:36:19,857 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:36:19,862 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:36:19,862 INFO L85 PathProgramCache]: Analyzing trace with hash -569629561, now seen corresponding path program 1 times [2023-11-23 20:36:19,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:36:19,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [610542219] [2023-11-23 20:36:19,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:36:19,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:36:19,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:36:20,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:36:20,078 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:36:20,079 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [610542219] [2023-11-23 20:36:20,079 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [610542219] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:36:20,080 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:36:20,080 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 20:36:20,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937175513] [2023-11-23 20:36:20,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:36:20,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-23 20:36:20,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:36:20,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-23 20:36:20,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 20:36:20,119 INFO L87 Difference]: Start difference. First operand has 52 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 41 states have internal predecessors, (50), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:36:20,195 INFO L93 Difference]: Finished difference Result 102 states and 141 transitions. [2023-11-23 20:36:20,196 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-23 20:36:20,198 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-23 20:36:20,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:36:20,207 INFO L225 Difference]: With dead ends: 102 [2023-11-23 20:36:20,208 INFO L226 Difference]: Without dead ends: 47 [2023-11-23 20:36:20,212 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-23 20:36:20,217 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 52 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 20:36:20,218 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 52 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 20:36:20,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2023-11-23 20:36:20,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2023-11-23 20:36:20,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 37 states have internal predecessors, (42), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-23 20:36:20,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 61 transitions. [2023-11-23 20:36:20,262 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 61 transitions. Word has length 12 [2023-11-23 20:36:20,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:36:20,263 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 61 transitions. [2023-11-23 20:36:20,263 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,264 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 61 transitions. [2023-11-23 20:36:20,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-23 20:36:20,266 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:36:20,266 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:36:20,266 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 20:36:20,266 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:36:20,267 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:36:20,268 INFO L85 PathProgramCache]: Analyzing trace with hash -841712267, now seen corresponding path program 1 times [2023-11-23 20:36:20,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:36:20,268 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473495461] [2023-11-23 20:36:20,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:36:20,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:36:20,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:36:20,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:36:20,378 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:36:20,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473495461] [2023-11-23 20:36:20,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473495461] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:36:20,379 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:36:20,379 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 20:36:20,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937641545] [2023-11-23 20:36:20,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:36:20,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 20:36:20,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:36:20,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 20:36:20,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 20:36:20,382 INFO L87 Difference]: Start difference. First operand 47 states and 61 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:36:20,425 INFO L93 Difference]: Finished difference Result 66 states and 84 transitions. [2023-11-23 20:36:20,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 20:36:20,426 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-23 20:36:20,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:36:20,428 INFO L225 Difference]: With dead ends: 66 [2023-11-23 20:36:20,429 INFO L226 Difference]: Without dead ends: 39 [2023-11-23 20:36:20,430 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 20:36:20,433 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 14 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 20:36:20,434 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 59 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 20:36:20,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2023-11-23 20:36:20,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2023-11-23 20:36:20,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 26 states have (on average 1.3846153846153846) internal successors, (36), 32 states have internal predecessors, (36), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-23 20:36:20,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 50 transitions. [2023-11-23 20:36:20,444 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 50 transitions. Word has length 13 [2023-11-23 20:36:20,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:36:20,444 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 50 transitions. [2023-11-23 20:36:20,444 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,445 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 50 transitions. [2023-11-23 20:36:20,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 20:36:20,446 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:36:20,446 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:36:20,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 20:36:20,447 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:36:20,447 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:36:20,447 INFO L85 PathProgramCache]: Analyzing trace with hash -1824239291, now seen corresponding path program 1 times [2023-11-23 20:36:20,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:36:20,448 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407567781] [2023-11-23 20:36:20,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:36:20,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:36:20,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:36:20,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:36:20,678 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:36:20,679 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407567781] [2023-11-23 20:36:20,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407567781] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:36:20,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:36:20,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-23 20:36:20,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842126768] [2023-11-23 20:36:20,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:36:20,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 20:36:20,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:36:20,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 20:36:20,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 20:36:20,682 INFO L87 Difference]: Start difference. First operand 39 states and 50 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:36:20,893 INFO L93 Difference]: Finished difference Result 119 states and 160 transitions. [2023-11-23 20:36:20,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 20:36:20,893 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-23 20:36:20,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:36:20,898 INFO L225 Difference]: With dead ends: 119 [2023-11-23 20:36:20,898 INFO L226 Difference]: Without dead ends: 82 [2023-11-23 20:36:20,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 20:36:20,909 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 63 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:36:20,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 106 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:36:20,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2023-11-23 20:36:20,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 65. [2023-11-23 20:36:20,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 44 states have (on average 1.3863636363636365) internal successors, (61), 53 states have internal predecessors, (61), 11 states have call successors, (11), 9 states have call predecessors, (11), 9 states have return successors, (12), 8 states have call predecessors, (12), 11 states have call successors, (12) [2023-11-23 20:36:20,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 84 transitions. [2023-11-23 20:36:20,937 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 84 transitions. Word has length 16 [2023-11-23 20:36:20,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:36:20,938 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 84 transitions. [2023-11-23 20:36:20,938 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:20,938 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2023-11-23 20:36:20,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 20:36:20,939 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:36:20,939 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:36:20,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 20:36:20,940 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:36:20,946 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:36:20,946 INFO L85 PathProgramCache]: Analyzing trace with hash 146231277, now seen corresponding path program 1 times [2023-11-23 20:36:20,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:36:20,946 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1907448924] [2023-11-23 20:36:20,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:36:20,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:36:20,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:36:21,295 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:36:21,296 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:36:21,296 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1907448924] [2023-11-23 20:36:21,297 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1907448924] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:36:21,298 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:36:21,298 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-23 20:36:21,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956566761] [2023-11-23 20:36:21,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:36:21,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 20:36:21,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:36:21,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 20:36:21,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-11-23 20:36:21,301 INFO L87 Difference]: Start difference. First operand 65 states and 84 transitions. Second operand has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:21,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:36:21,413 INFO L93 Difference]: Finished difference Result 178 states and 236 transitions. [2023-11-23 20:36:21,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 20:36:21,414 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2023-11-23 20:36:21,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:36:21,417 INFO L225 Difference]: With dead ends: 178 [2023-11-23 20:36:21,417 INFO L226 Difference]: Without dead ends: 115 [2023-11-23 20:36:21,421 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2023-11-23 20:36:21,431 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 20 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:36:21,433 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 142 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:36:21,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2023-11-23 20:36:21,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 108. [2023-11-23 20:36:21,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 77 states have (on average 1.3376623376623376) internal successors, (103), 88 states have internal predecessors, (103), 16 states have call successors, (16), 14 states have call predecessors, (16), 14 states have return successors, (18), 13 states have call predecessors, (18), 16 states have call successors, (18) [2023-11-23 20:36:21,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 137 transitions. [2023-11-23 20:36:21,475 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 137 transitions. Word has length 19 [2023-11-23 20:36:21,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:36:21,476 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 137 transitions. [2023-11-23 20:36:21,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.6) internal successors, (18), 4 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:21,476 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 137 transitions. [2023-11-23 20:36:21,479 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-23 20:36:21,480 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 20:36:21,480 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 20:36:21,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 20:36:21,480 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-23 20:36:21,480 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 20:36:21,481 INFO L85 PathProgramCache]: Analyzing trace with hash -449024278, now seen corresponding path program 1 times [2023-11-23 20:36:21,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 20:36:21,481 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003272798] [2023-11-23 20:36:21,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 20:36:21,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 20:36:21,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 20:36:21,760 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 20:36:21,760 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 20:36:21,760 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003272798] [2023-11-23 20:36:21,760 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003272798] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 20:36:21,760 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 20:36:21,760 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-23 20:36:21,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1328887924] [2023-11-23 20:36:21,761 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 20:36:21,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 20:36:21,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 20:36:21,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 20:36:21,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-23 20:36:21,763 INFO L87 Difference]: Start difference. First operand 108 states and 137 transitions. Second operand has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 20:36:21,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 20:36:21,951 INFO L93 Difference]: Finished difference Result 164 states and 211 transitions. [2023-11-23 20:36:21,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-23 20:36:21,952 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 22 [2023-11-23 20:36:21,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 20:36:21,952 INFO L225 Difference]: With dead ends: 164 [2023-11-23 20:36:21,952 INFO L226 Difference]: Without dead ends: 0 [2023-11-23 20:36:21,953 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2023-11-23 20:36:21,954 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 106 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 20:36:21,955 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 108 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 20:36:21,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-23 20:36:21,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-23 20:36:21,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 20:36:21,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-23 20:36:21,956 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 22 [2023-11-23 20:36:21,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 20:36:21,956 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-23 20:36:21,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.7142857142857144) internal successors, (19), 6 states have internal predecessors, (19), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 20:36:21,957 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-23 20:36:21,957 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-23 20:36:21,959 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-23 20:36:21,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 20:36:21,962 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-23 20:36:22,439 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 440 447) no Hoare annotation was computed. [2023-11-23 20:36:22,440 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 440 447) the Hoare annotation is: true [2023-11-23 20:36:22,440 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 381 387) no Hoare annotation was computed. [2023-11-23 20:36:22,440 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 381 387) the Hoare annotation is: true [2023-11-23 20:36:22,440 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 221 232) the Hoare annotation is: true [2023-11-23 20:36:22,440 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 221 232) no Hoare annotation was computed. [2023-11-23 20:36:22,441 INFO L895 garLoopResultBuilder]: At program point L403(line 403) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 20:36:22,441 INFO L895 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2)) (or .cse0 (not (= |old(~waterLevel~0)| 1))))) [2023-11-23 20:36:22,441 INFO L895 garLoopResultBuilder]: At program point L408(line 408) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or .cse2 (< |old(~waterLevel~0)| 2) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1)))) [2023-11-23 20:36:22,441 INFO L899 garLoopResultBuilder]: For program point L408-1(lines 389 413) no Hoare annotation was computed. [2023-11-23 20:36:22,441 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2023-11-23 20:36:22,441 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 186) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point L173-1(lines 165 189) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point L368-1(lines 368 374) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point L397(lines 397 405) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 357 380) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (< |old(~waterLevel~0)| 2)))) [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 410) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point L158(line 158) no Hoare annotation was computed. [2023-11-23 20:36:22,442 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 357 380) no Hoare annotation was computed. [2023-11-23 20:36:22,443 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2023-11-23 20:36:22,443 INFO L899 garLoopResultBuilder]: For program point L361-1(lines 360 379) no Hoare annotation was computed. [2023-11-23 20:36:22,443 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2023-11-23 20:36:22,443 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2023-11-23 20:36:22,443 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2023-11-23 20:36:22,443 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2023-11-23 20:36:22,443 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2023-11-23 20:36:22,443 INFO L899 garLoopResultBuilder]: For program point L77(lines 52 81) no Hoare annotation was computed. [2023-11-23 20:36:22,444 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2023-11-23 20:36:22,444 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2023-11-23 20:36:22,444 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2023-11-23 20:36:22,444 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2023-11-23 20:36:22,445 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2023-11-23 20:36:22,445 INFO L899 garLoopResultBuilder]: For program point L296(lines 295 342) no Hoare annotation was computed. [2023-11-23 20:36:22,445 INFO L899 garLoopResultBuilder]: For program point L325(lines 325 338) no Hoare annotation was computed. [2023-11-23 20:36:22,445 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point L346(lines 285 350) no Hoare annotation was computed. [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2023-11-23 20:36:22,446 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-23 20:36:22,447 INFO L895 garLoopResultBuilder]: At program point L343(lines 294 344) the Hoare annotation is: false [2023-11-23 20:36:22,447 INFO L895 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: false [2023-11-23 20:36:22,447 INFO L899 garLoopResultBuilder]: For program point L331(lines 331 337) no Hoare annotation was computed. [2023-11-23 20:36:22,447 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-23 20:36:22,447 INFO L895 garLoopResultBuilder]: At program point L331-2(lines 325 338) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:36:22,447 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2023-11-23 20:36:22,448 INFO L899 garLoopResultBuilder]: For program point L315-1(lines 315 321) no Hoare annotation was computed. [2023-11-23 20:36:22,448 INFO L895 garLoopResultBuilder]: At program point L340(lines 295 342) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:36:22,448 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2023-11-23 20:36:22,448 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 209 220) no Hoare annotation was computed. [2023-11-23 20:36:22,449 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 209 220) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0)))) (and (or .cse0 (< |old(~waterLevel~0)| 2) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1)))) [2023-11-23 20:36:22,451 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2023-11-23 20:36:22,453 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-23 20:36:22,466 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 08:36:22 BoogieIcfgContainer [2023-11-23 20:36:22,466 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-23 20:36:22,467 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-23 20:36:22,467 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-23 20:36:22,467 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-23 20:36:22,468 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 08:36:19" (3/4) ... [2023-11-23 20:36:22,470 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-23 20:36:22,473 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-23 20:36:22,473 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-23 20:36:22,473 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-23 20:36:22,473 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-23 20:36:22,474 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-23 20:36:22,474 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-23 20:36:22,481 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2023-11-23 20:36:22,482 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2023-11-23 20:36:22,482 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-23 20:36:22,483 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 20:36:22,483 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-23 20:36:22,512 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-23 20:36:22,541 WARN L141 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) [2023-11-23 20:36:22,590 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/witness.graphml [2023-11-23 20:36:22,590 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/witness.yml [2023-11-23 20:36:22,590 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-23 20:36:22,591 INFO L158 Benchmark]: Toolchain (without parser) took 4070.44ms. Allocated memory is still 178.3MB. Free memory was 147.8MB in the beginning and 103.2MB in the end (delta: 44.6MB). Peak memory consumption was 44.9MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,591 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 127.9MB. Free memory is still 101.5MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 20:36:22,592 INFO L158 Benchmark]: CACSL2BoogieTranslator took 493.14ms. Allocated memory is still 178.3MB. Free memory was 147.3MB in the beginning and 128.2MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,592 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.62ms. Allocated memory is still 178.3MB. Free memory was 128.2MB in the beginning and 126.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,593 INFO L158 Benchmark]: Boogie Preprocessor took 60.18ms. Allocated memory is still 178.3MB. Free memory was 126.1MB in the beginning and 124.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,593 INFO L158 Benchmark]: RCFGBuilder took 635.68ms. Allocated memory is still 178.3MB. Free memory was 124.3MB in the beginning and 129.0MB in the end (delta: -4.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,593 INFO L158 Benchmark]: TraceAbstraction took 2700.27ms. Allocated memory is still 178.3MB. Free memory was 128.0MB in the beginning and 110.6MB in the end (delta: 17.4MB). Peak memory consumption was 19.5MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,594 INFO L158 Benchmark]: Witness Printer took 123.76ms. Allocated memory is still 178.3MB. Free memory was 110.6MB in the beginning and 103.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-23 20:36:22,596 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 127.9MB. Free memory is still 101.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 493.14ms. Allocated memory is still 178.3MB. Free memory was 147.3MB in the beginning and 128.2MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.62ms. Allocated memory is still 178.3MB. Free memory was 128.2MB in the beginning and 126.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.18ms. Allocated memory is still 178.3MB. Free memory was 126.1MB in the beginning and 124.3MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 635.68ms. Allocated memory is still 178.3MB. Free memory was 124.3MB in the beginning and 129.0MB in the end (delta: -4.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 2700.27ms. Allocated memory is still 178.3MB. Free memory was 128.0MB in the beginning and 110.6MB in the end (delta: 17.4MB). Peak memory consumption was 19.5MB. Max. memory is 16.1GB. * Witness Printer took 123.76ms. Allocated memory is still 178.3MB. Free memory was 110.6MB in the beginning and 103.2MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [49] - GenericResultAtLocation [Line: 153]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [153] - GenericResultAtLocation [Line: 162]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [162] - GenericResultAtLocation [Line: 190]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [190] - GenericResultAtLocation [Line: 283]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [283] - GenericResultAtLocation [Line: 351]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [351] - GenericResultAtLocation [Line: 538]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [538] - GenericResultAtLocation [Line: 573]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [573] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 52 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.6s, OverallIterations: 5, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 208 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 203 mSDsluCounter, 467 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 264 mSDsCounter, 55 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 242 IncrementalHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 55 mSolverCounterUnsat, 203 mSDtfsCounter, 242 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 26 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=108occurred in iteration=4, InterpolantAutomatonStates: 21, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 5 MinimizatonAttempts, 24 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 18 LocationsWithAnnotation, 113 PreInvPairs, 129 NumberOfFragments, 225 HoareAnnotationTreeSize, 113 FomulaSimplifications, 100 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 18 FomulaSimplificationsInter, 570 FormulaSimplificationTreeSizeReductionInter, 0.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 82 NumberOfCodeBlocks, 82 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 77 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel == 1)) || (((pumpRunning == 0) && (2 <= waterLevel)) && (splverifierCounter == 0))) - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (\old(waterLevel) < 2))) RESULT: Ultimate proved your program to be correct! [2023-11-23 20:36:22,630 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d22c1b71-1e77-454a-b799-cb034b678f43/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE