./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version 5e519f3a
Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1b7b562c6a835e9c81bbd978940c7270ae455ff1120bac33da414b2ebf27928d
--- Real Ultimate output ---
[0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset.
This is Ultimate 0.2.2-dev-5e519f3
[2022-11-02 20:08:45,274 INFO  L177        SettingsManager]: Resetting all preferences to default values...
[2022-11-02 20:08:45,277 INFO  L181        SettingsManager]: Resetting UltimateCore preferences to default values
[2022-11-02 20:08:45,306 INFO  L184        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2022-11-02 20:08:45,307 INFO  L181        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2022-11-02 20:08:45,308 INFO  L181        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2022-11-02 20:08:45,310 INFO  L181        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2022-11-02 20:08:45,312 INFO  L181        SettingsManager]: Resetting LassoRanker preferences to default values
[2022-11-02 20:08:45,314 INFO  L181        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2022-11-02 20:08:45,315 INFO  L181        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2022-11-02 20:08:45,316 INFO  L181        SettingsManager]: Resetting Sifa preferences to default values
[2022-11-02 20:08:45,318 INFO  L184        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2022-11-02 20:08:45,318 INFO  L181        SettingsManager]: Resetting LTL2Aut preferences to default values
[2022-11-02 20:08:45,320 INFO  L181        SettingsManager]: Resetting PEA to Boogie preferences to default values
[2022-11-02 20:08:45,321 INFO  L181        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2022-11-02 20:08:45,322 INFO  L181        SettingsManager]: Resetting ChcToBoogie preferences to default values
[2022-11-02 20:08:45,323 INFO  L181        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2022-11-02 20:08:45,325 INFO  L181        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2022-11-02 20:08:45,327 INFO  L181        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2022-11-02 20:08:45,329 INFO  L181        SettingsManager]: Resetting CodeCheck preferences to default values
[2022-11-02 20:08:45,331 INFO  L181        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2022-11-02 20:08:45,333 INFO  L181        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2022-11-02 20:08:45,334 INFO  L181        SettingsManager]: Resetting Referee preferences to default values
[2022-11-02 20:08:45,335 INFO  L181        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2022-11-02 20:08:45,340 INFO  L184        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2022-11-02 20:08:45,340 INFO  L184        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2022-11-02 20:08:45,341 INFO  L181        SettingsManager]: Resetting TreeAutomizer preferences to default values
[2022-11-02 20:08:45,342 INFO  L181        SettingsManager]: Resetting IcfgToChc preferences to default values
[2022-11-02 20:08:45,343 INFO  L181        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2022-11-02 20:08:45,344 INFO  L184        SettingsManager]: ReqToTest provides no preferences, ignoring...
[2022-11-02 20:08:45,344 INFO  L181        SettingsManager]: Resetting Boogie Printer preferences to default values
[2022-11-02 20:08:45,345 INFO  L181        SettingsManager]: Resetting ChcSmtPrinter preferences to default values
[2022-11-02 20:08:45,346 INFO  L181        SettingsManager]: Resetting ReqPrinter preferences to default values
[2022-11-02 20:08:45,350 INFO  L181        SettingsManager]: Resetting Witness Printer preferences to default values
[2022-11-02 20:08:45,351 INFO  L184        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2022-11-02 20:08:45,351 INFO  L181        SettingsManager]: Resetting CDTParser preferences to default values
[2022-11-02 20:08:45,352 INFO  L184        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2022-11-02 20:08:45,352 INFO  L184        SettingsManager]: ReqParser provides no preferences, ignoring...
[2022-11-02 20:08:45,353 INFO  L181        SettingsManager]: Resetting SmtParser preferences to default values
[2022-11-02 20:08:45,354 INFO  L181        SettingsManager]: Resetting Witness Parser preferences to default values
[2022-11-02 20:08:45,354 INFO  L188        SettingsManager]: Finished resetting all preferences to default values...
[2022-11-02 20:08:45,357 INFO  L101        SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf
[2022-11-02 20:08:45,403 INFO  L113        SettingsManager]: Loading preferences was successful
[2022-11-02 20:08:45,406 INFO  L115        SettingsManager]: Preferences different from defaults after loading the file:
[2022-11-02 20:08:45,407 INFO  L136        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2022-11-02 20:08:45,408 INFO  L138        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2022-11-02 20:08:45,408 INFO  L136        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2022-11-02 20:08:45,409 INFO  L138        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2022-11-02 20:08:45,410 INFO  L136        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2022-11-02 20:08:45,410 INFO  L138        SettingsManager]:  * Create parallel compositions if possible=false
[2022-11-02 20:08:45,411 INFO  L138        SettingsManager]:  * Use SBE=true
[2022-11-02 20:08:45,411 INFO  L136        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2022-11-02 20:08:45,412 INFO  L138        SettingsManager]:  * sizeof long=4
[2022-11-02 20:08:45,413 INFO  L138        SettingsManager]:  * Overapproximate operations on floating types=true
[2022-11-02 20:08:45,413 INFO  L138        SettingsManager]:  * sizeof POINTER=4
[2022-11-02 20:08:45,413 INFO  L138        SettingsManager]:  * Check division by zero=IGNORE
[2022-11-02 20:08:45,413 INFO  L138        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2022-11-02 20:08:45,414 INFO  L138        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2022-11-02 20:08:45,414 INFO  L138        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2022-11-02 20:08:45,414 INFO  L138        SettingsManager]:  * sizeof long double=12
[2022-11-02 20:08:45,414 INFO  L138        SettingsManager]:  * Check if freed pointer was valid=false
[2022-11-02 20:08:45,415 INFO  L138        SettingsManager]:  * Use constant arrays=true
[2022-11-02 20:08:45,415 INFO  L138        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2022-11-02 20:08:45,415 INFO  L136        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2022-11-02 20:08:45,416 INFO  L138        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2022-11-02 20:08:45,416 INFO  L138        SettingsManager]:  * SMT solver=External_DefaultMode
[2022-11-02 20:08:45,416 INFO  L138        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2022-11-02 20:08:45,416 INFO  L136        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2022-11-02 20:08:45,417 INFO  L138        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2022-11-02 20:08:45,417 INFO  L138        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2022-11-02 20:08:45,417 INFO  L138        SettingsManager]:  * Trace refinement strategy=CAMEL
[2022-11-02 20:08:45,418 INFO  L138        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2022-11-02 20:08:45,418 INFO  L138        SettingsManager]:  * Apply one-shot large block encoding in concurrent analysis=false
[2022-11-02 20:08:45,418 INFO  L138        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2022-11-02 20:08:45,419 INFO  L138        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2022-11-02 20:08:45,419 INFO  L138        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1b7b562c6a835e9c81bbd978940c7270ae455ff1120bac33da414b2ebf27928d
[2022-11-02 20:08:45,765 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2022-11-02 20:08:45,812 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2022-11-02 20:08:45,816 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2022-11-02 20:08:45,818 INFO  L271        PluginConnector]: Initializing CDTParser...
[2022-11-02 20:08:45,819 INFO  L275        PluginConnector]: CDTParser initialized
[2022-11-02 20:08:45,821 INFO  L432   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c
[2022-11-02 20:08:45,905 INFO  L220              CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/data/d770cd5c4/3f859963b87f40f686d82101301a97a3/FLAG1ae52f776
[2022-11-02 20:08:46,593 INFO  L306              CDTParser]: Found 1 translation units.
[2022-11-02 20:08:46,593 INFO  L160              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c
[2022-11-02 20:08:46,609 INFO  L349              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/data/d770cd5c4/3f859963b87f40f686d82101301a97a3/FLAG1ae52f776
[2022-11-02 20:08:46,819 INFO  L357              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/data/d770cd5c4/3f859963b87f40f686d82101301a97a3
[2022-11-02 20:08:46,822 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2022-11-02 20:08:46,824 INFO  L131        ToolchainWalker]: Walking toolchain with 6 elements.
[2022-11-02 20:08:46,826 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2022-11-02 20:08:46,826 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2022-11-02 20:08:46,833 INFO  L275        PluginConnector]: CACSL2BoogieTranslator initialized
[2022-11-02 20:08:46,834 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:08:46" (1/1) ...
[2022-11-02 20:08:46,836 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3380e4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:46, skipping insertion in model container
[2022-11-02 20:08:46,836 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:08:46" (1/1) ...
[2022-11-02 20:08:46,846 INFO  L145         MainTranslator]: Starting translation in SV-COMP mode 
[2022-11-02 20:08:46,908 INFO  L178         MainTranslator]: Built tables and reachable declarations
[2022-11-02 20:08:47,239 WARN  L230   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c[12494,12507]
[2022-11-02 20:08:47,290 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2022-11-02 20:08:47,302 INFO  L203         MainTranslator]: Completed pre-run
[2022-11-02 20:08:47,366 WARN  L230   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/sv-benchmarks/c/product-lines/minepump_spec4_product13.cil.c[12494,12507]
[2022-11-02 20:08:47,385 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2022-11-02 20:08:47,405 INFO  L208         MainTranslator]: Completed translation
[2022-11-02 20:08:47,406 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47 WrapperNode
[2022-11-02 20:08:47,406 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2022-11-02 20:08:47,407 INFO  L113        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2022-11-02 20:08:47,408 INFO  L271        PluginConnector]: Initializing Boogie Procedure Inliner...
[2022-11-02 20:08:47,408 INFO  L275        PluginConnector]: Boogie Procedure Inliner initialized
[2022-11-02 20:08:47,417 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,436 INFO  L185        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,494 INFO  L138                Inliner]: procedures = 51, calls = 150, calls flagged for inlining = 20, calls inlined = 16, statements flattened = 213
[2022-11-02 20:08:47,496 INFO  L132        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2022-11-02 20:08:47,496 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2022-11-02 20:08:47,497 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2022-11-02 20:08:47,497 INFO  L275        PluginConnector]: Boogie Preprocessor initialized
[2022-11-02 20:08:47,507 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,508 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,521 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,525 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,531 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,550 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,552 INFO  L185        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,553 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,556 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2022-11-02 20:08:47,557 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2022-11-02 20:08:47,563 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2022-11-02 20:08:47,564 INFO  L275        PluginConnector]: RCFGBuilder initialized
[2022-11-02 20:08:47,565 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (1/1) ...
[2022-11-02 20:08:47,575 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2022-11-02 20:08:47,592 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/z3
[2022-11-02 20:08:47,606 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
[2022-11-02 20:08:47,626 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process
[2022-11-02 20:08:47,664 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2022-11-02 20:08:47,664 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2022-11-02 20:08:47,664 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2022-11-02 20:08:47,665 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2022-11-02 20:08:47,665 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2022-11-02 20:08:47,665 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2022-11-02 20:08:47,665 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2022-11-02 20:08:47,665 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery
[2022-11-02 20:08:47,667 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery
[2022-11-02 20:08:47,667 INFO  L130     BoogieDeclarations]: Found specification of procedure isMethaneAlarm
[2022-11-02 20:08:47,668 INFO  L138     BoogieDeclarations]: Found implementation of procedure isMethaneAlarm
[2022-11-02 20:08:47,668 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int
[2022-11-02 20:08:47,668 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2022-11-02 20:08:47,668 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2022-11-02 20:08:47,668 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2022-11-02 20:08:47,669 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2022-11-02 20:08:47,802 INFO  L235             CfgBuilder]: Building ICFG
[2022-11-02 20:08:47,805 INFO  L261             CfgBuilder]: Building CFG for each procedure with an implementation
[2022-11-02 20:08:48,111 INFO  L276             CfgBuilder]: Performing block encoding
[2022-11-02 20:08:48,123 INFO  L295             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2022-11-02 20:08:48,123 INFO  L300             CfgBuilder]: Removed 2 assume(true) statements.
[2022-11-02 20:08:48,126 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:08:48 BoogieIcfgContainer
[2022-11-02 20:08:48,131 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2022-11-02 20:08:48,135 INFO  L113        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2022-11-02 20:08:48,138 INFO  L271        PluginConnector]: Initializing TraceAbstraction...
[2022-11-02 20:08:48,161 INFO  L275        PluginConnector]: TraceAbstraction initialized
[2022-11-02 20:08:48,161 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:08:46" (1/3) ...
[2022-11-02 20:08:48,162 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6678266f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:08:48, skipping insertion in model container
[2022-11-02 20:08:48,162 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:08:47" (2/3) ...
[2022-11-02 20:08:48,162 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6678266f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:08:48, skipping insertion in model container
[2022-11-02 20:08:48,163 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:08:48" (3/3) ...
[2022-11-02 20:08:48,164 INFO  L112   eAbstractionObserver]: Analyzing ICFG minepump_spec4_product13.cil.c
[2022-11-02 20:08:48,197 INFO  L203   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2022-11-02 20:08:48,198 INFO  L162   ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations.
[2022-11-02 20:08:48,285 INFO  L356      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2022-11-02 20:08:48,298 INFO  L357      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@638c0490, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms]
[2022-11-02 20:08:48,299 INFO  L358      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2022-11-02 20:08:48,315 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 71 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 60 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9)
[2022-11-02 20:08:48,329 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2022-11-02 20:08:48,330 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:48,331 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:48,332 INFO  L420      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:48,342 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:48,342 INFO  L85        PathProgramCache]: Analyzing trace with hash -250715153, now seen corresponding path program 1 times
[2022-11-02 20:08:48,359 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:48,360 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [913184167]
[2022-11-02 20:08:48,360 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:48,361 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:48,570 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:48,676 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:48,677 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:48,678 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [913184167]
[2022-11-02 20:08:48,679 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [913184167] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:48,679 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:48,680 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2022-11-02 20:08:48,682 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1596918234]
[2022-11-02 20:08:48,683 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:48,688 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2022-11-02 20:08:48,689 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:48,759 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2022-11-02 20:08:48,760 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2022-11-02 20:08:48,764 INFO  L87              Difference]: Start difference. First operand  has 71 states, 54 states have (on average 1.3888888888888888) internal successors, (75), 60 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) Second operand  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:48,820 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:48,820 INFO  L93              Difference]: Finished difference Result 134 states and 181 transitions.
[2022-11-02 20:08:48,821 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2022-11-02 20:08:48,823 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2022-11-02 20:08:48,823 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:48,836 INFO  L225             Difference]: With dead ends: 134
[2022-11-02 20:08:48,836 INFO  L226             Difference]: Without dead ends: 62
[2022-11-02 20:08:48,842 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2022-11-02 20:08:48,850 INFO  L413           NwaCegarLoop]: 87 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:48,852 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:08:48,876 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 62 states.
[2022-11-02 20:08:48,917 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62.
[2022-11-02 20:08:48,922 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 62 states, 47 states have (on average 1.297872340425532) internal successors, (61), 52 states have internal predecessors, (61), 9 states have call successors, (9), 6 states have call predecessors, (9), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8)
[2022-11-02 20:08:48,924 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 78 transitions.
[2022-11-02 20:08:48,926 INFO  L78                 Accepts]: Start accepts. Automaton has 62 states and 78 transitions. Word has length 19
[2022-11-02 20:08:48,926 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:48,927 INFO  L495      AbstractCegarLoop]: Abstraction has 62 states and 78 transitions.
[2022-11-02 20:08:48,927 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:48,927 INFO  L276                IsEmpty]: Start isEmpty. Operand 62 states and 78 transitions.
[2022-11-02 20:08:48,929 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 21
[2022-11-02 20:08:48,930 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:48,930 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:48,930 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2022-11-02 20:08:48,931 INFO  L420      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:48,932 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:48,932 INFO  L85        PathProgramCache]: Analyzing trace with hash -1134572943, now seen corresponding path program 1 times
[2022-11-02 20:08:48,932 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:48,933 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580420879]
[2022-11-02 20:08:48,933 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:48,933 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:48,972 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,089 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:49,090 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:49,090 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580420879]
[2022-11-02 20:08:49,090 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580420879] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:49,091 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:49,091 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2022-11-02 20:08:49,091 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408923272]
[2022-11-02 20:08:49,092 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:49,093 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2022-11-02 20:08:49,093 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:49,094 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2022-11-02 20:08:49,094 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,095 INFO  L87              Difference]: Start difference. First operand 62 states and 78 transitions. Second operand  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:49,111 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:49,111 INFO  L93              Difference]: Finished difference Result 90 states and 112 transitions.
[2022-11-02 20:08:49,112 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2022-11-02 20:08:49,112 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20
[2022-11-02 20:08:49,113 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:49,114 INFO  L225             Difference]: With dead ends: 90
[2022-11-02 20:08:49,114 INFO  L226             Difference]: Without dead ends: 53
[2022-11-02 20:08:49,115 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,117 INFO  L413           NwaCegarLoop]: 65 mSDtfsCounter, 12 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:49,118 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 114 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:08:49,119 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 53 states.
[2022-11-02 20:08:49,125 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53.
[2022-11-02 20:08:49,126 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 53 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 46 states have internal predecessors, (54), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6)
[2022-11-02 20:08:49,127 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 66 transitions.
[2022-11-02 20:08:49,128 INFO  L78                 Accepts]: Start accepts. Automaton has 53 states and 66 transitions. Word has length 20
[2022-11-02 20:08:49,128 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:49,128 INFO  L495      AbstractCegarLoop]: Abstraction has 53 states and 66 transitions.
[2022-11-02 20:08:49,129 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:49,129 INFO  L276                IsEmpty]: Start isEmpty. Operand 53 states and 66 transitions.
[2022-11-02 20:08:49,130 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 25
[2022-11-02 20:08:49,130 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:49,131 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:49,131 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2022-11-02 20:08:49,131 INFO  L420      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:49,132 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:49,132 INFO  L85        PathProgramCache]: Analyzing trace with hash -1568040948, now seen corresponding path program 1 times
[2022-11-02 20:08:49,132 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:49,133 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1878786027]
[2022-11-02 20:08:49,133 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:49,133 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:49,160 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,241 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:49,241 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:49,241 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1878786027]
[2022-11-02 20:08:49,242 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1878786027] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:49,242 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:49,242 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2022-11-02 20:08:49,242 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2145147571]
[2022-11-02 20:08:49,243 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:49,243 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2022-11-02 20:08:49,244 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:49,244 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2022-11-02 20:08:49,244 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,245 INFO  L87              Difference]: Start difference. First operand 53 states and 66 transitions. Second operand  has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:49,258 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:49,259 INFO  L93              Difference]: Finished difference Result 99 states and 126 transitions.
[2022-11-02 20:08:49,259 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2022-11-02 20:08:49,260 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24
[2022-11-02 20:08:49,260 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:49,261 INFO  L225             Difference]: With dead ends: 99
[2022-11-02 20:08:49,261 INFO  L226             Difference]: Without dead ends: 53
[2022-11-02 20:08:49,262 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,267 INFO  L413           NwaCegarLoop]: 64 mSDtfsCounter, 48 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:49,270 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 64 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:08:49,271 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 53 states.
[2022-11-02 20:08:49,282 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53.
[2022-11-02 20:08:49,291 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 53 states, 41 states have (on average 1.2926829268292683) internal successors, (53), 46 states have internal predecessors, (53), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6)
[2022-11-02 20:08:49,292 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 65 transitions.
[2022-11-02 20:08:49,299 INFO  L78                 Accepts]: Start accepts. Automaton has 53 states and 65 transitions. Word has length 24
[2022-11-02 20:08:49,299 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:49,300 INFO  L495      AbstractCegarLoop]: Abstraction has 53 states and 65 transitions.
[2022-11-02 20:08:49,300 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:49,300 INFO  L276                IsEmpty]: Start isEmpty. Operand 53 states and 65 transitions.
[2022-11-02 20:08:49,301 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 30
[2022-11-02 20:08:49,302 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:49,302 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:49,302 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2022-11-02 20:08:49,303 INFO  L420      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:49,303 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:49,303 INFO  L85        PathProgramCache]: Analyzing trace with hash -1290700286, now seen corresponding path program 1 times
[2022-11-02 20:08:49,304 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:49,304 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279093781]
[2022-11-02 20:08:49,304 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:49,305 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:49,345 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,533 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19
[2022-11-02 20:08:49,535 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,538 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:49,539 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:49,539 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279093781]
[2022-11-02 20:08:49,539 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279093781] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:49,539 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:49,540 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2022-11-02 20:08:49,540 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477294071]
[2022-11-02 20:08:49,540 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:49,541 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2022-11-02 20:08:49,541 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:49,542 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2022-11-02 20:08:49,542 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2022-11-02 20:08:49,542 INFO  L87              Difference]: Start difference. First operand 53 states and 65 transitions. Second operand  has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:08:49,648 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:49,657 INFO  L93              Difference]: Finished difference Result 138 states and 178 transitions.
[2022-11-02 20:08:49,658 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2022-11-02 20:08:49,658 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29
[2022-11-02 20:08:49,659 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:49,660 INFO  L225             Difference]: With dead ends: 138
[2022-11-02 20:08:49,660 INFO  L226             Difference]: Without dead ends: 92
[2022-11-02 20:08:49,661 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42
[2022-11-02 20:08:49,662 INFO  L413           NwaCegarLoop]: 66 mSDtfsCounter, 38 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 253 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:49,663 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 253 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:08:49,664 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 92 states.
[2022-11-02 20:08:49,694 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92.
[2022-11-02 20:08:49,695 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 92 states, 70 states have (on average 1.2857142857142858) internal successors, (90), 78 states have internal predecessors, (90), 12 states have call successors, (12), 10 states have call predecessors, (12), 9 states have return successors, (13), 9 states have call predecessors, (13), 12 states have call successors, (13)
[2022-11-02 20:08:49,697 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 115 transitions.
[2022-11-02 20:08:49,697 INFO  L78                 Accepts]: Start accepts. Automaton has 92 states and 115 transitions. Word has length 29
[2022-11-02 20:08:49,698 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:49,698 INFO  L495      AbstractCegarLoop]: Abstraction has 92 states and 115 transitions.
[2022-11-02 20:08:49,698 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:08:49,699 INFO  L276                IsEmpty]: Start isEmpty. Operand 92 states and 115 transitions.
[2022-11-02 20:08:49,700 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2022-11-02 20:08:49,701 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:49,701 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:49,701 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2022-11-02 20:08:49,702 INFO  L420      AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:49,702 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:49,702 INFO  L85        PathProgramCache]: Analyzing trace with hash 1148145597, now seen corresponding path program 1 times
[2022-11-02 20:08:49,703 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:49,703 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [374608450]
[2022-11-02 20:08:49,703 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:49,704 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:49,721 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,785 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21
[2022-11-02 20:08:49,787 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,789 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:49,789 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:49,790 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [374608450]
[2022-11-02 20:08:49,790 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [374608450] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:49,790 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:49,790 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2022-11-02 20:08:49,791 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179299645]
[2022-11-02 20:08:49,791 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:49,792 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2022-11-02 20:08:49,792 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:49,792 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2022-11-02 20:08:49,793 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,793 INFO  L87              Difference]: Start difference. First operand 92 states and 115 transitions. Second operand  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:08:49,813 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:49,813 INFO  L93              Difference]: Finished difference Result 156 states and 199 transitions.
[2022-11-02 20:08:49,814 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2022-11-02 20:08:49,814 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31
[2022-11-02 20:08:49,815 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:49,816 INFO  L225             Difference]: With dead ends: 156
[2022-11-02 20:08:49,816 INFO  L226             Difference]: Without dead ends: 71
[2022-11-02 20:08:49,817 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:08:49,818 INFO  L413           NwaCegarLoop]: 46 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:49,819 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 46 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:08:49,820 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 71 states.
[2022-11-02 20:08:49,829 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71.
[2022-11-02 20:08:49,830 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 71 states, 55 states have (on average 1.2363636363636363) internal successors, (68), 59 states have internal predecessors, (68), 8 states have call successors, (8), 8 states have call predecessors, (8), 7 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8)
[2022-11-02 20:08:49,831 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 84 transitions.
[2022-11-02 20:08:49,832 INFO  L78                 Accepts]: Start accepts. Automaton has 71 states and 84 transitions. Word has length 31
[2022-11-02 20:08:49,832 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:49,832 INFO  L495      AbstractCegarLoop]: Abstraction has 71 states and 84 transitions.
[2022-11-02 20:08:49,833 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:08:49,833 INFO  L276                IsEmpty]: Start isEmpty. Operand 71 states and 84 transitions.
[2022-11-02 20:08:49,834 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 34
[2022-11-02 20:08:49,835 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:08:49,835 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:49,835 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4
[2022-11-02 20:08:49,836 INFO  L420      AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:08:49,836 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:08:49,836 INFO  L85        PathProgramCache]: Analyzing trace with hash 809516028, now seen corresponding path program 1 times
[2022-11-02 20:08:49,837 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:08:49,837 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012852847]
[2022-11-02 20:08:49,837 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:08:49,838 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:08:49,855 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,963 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11
[2022-11-02 20:08:49,966 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,969 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23
[2022-11-02 20:08:49,971 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:08:49,974 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:08:49,974 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:08:49,975 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012852847]
[2022-11-02 20:08:49,975 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012852847] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:08:49,975 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:08:49,976 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6
[2022-11-02 20:08:49,976 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707036996]
[2022-11-02 20:08:49,976 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:08:49,977 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2022-11-02 20:08:49,977 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:08:49,978 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2022-11-02 20:08:49,978 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30
[2022-11-02 20:08:49,978 INFO  L87              Difference]: Start difference. First operand 71 states and 84 transitions. Second operand  has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2)
[2022-11-02 20:08:50,089 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:08:50,089 INFO  L93              Difference]: Finished difference Result 76 states and 89 transitions.
[2022-11-02 20:08:50,090 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2022-11-02 20:08:50,090 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33
[2022-11-02 20:08:50,091 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:08:50,091 INFO  L225             Difference]: With dead ends: 76
[2022-11-02 20:08:50,091 INFO  L226             Difference]: Without dead ends: 0
[2022-11-02 20:08:50,092 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72
[2022-11-02 20:08:50,093 INFO  L413           NwaCegarLoop]: 43 mSDtfsCounter, 44 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2022-11-02 20:08:50,094 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 136 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2022-11-02 20:08:50,095 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 0 states.
[2022-11-02 20:08:50,095 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0.
[2022-11-02 20:08:50,095 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:08:50,095 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions.
[2022-11-02 20:08:50,096 INFO  L78                 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 33
[2022-11-02 20:08:50,096 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:08:50,096 INFO  L495      AbstractCegarLoop]: Abstraction has 0 states and 0 transitions.
[2022-11-02 20:08:50,097 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2)
[2022-11-02 20:08:50,097 INFO  L276                IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions.
[2022-11-02 20:08:50,097 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2022-11-02 20:08:50,100 INFO  L805   garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2022-11-02 20:08:50,101 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5
[2022-11-02 20:08:50,104 INFO  L343    DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions.
[2022-11-02 20:08:50,730 INFO  L902   garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 82 93) the Hoare annotation is: true
[2022-11-02 20:08:50,730 INFO  L899   garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 82 93) no Hoare annotation was computed.
[2022-11-02 20:08:50,731 INFO  L899   garLoopResultBuilder]: For program point L86-1(lines 82 93) no Hoare annotation was computed.
[2022-11-02 20:08:50,731 INFO  L899   garLoopResultBuilder]: For program point L506(line 506) no Hoare annotation was computed.
[2022-11-02 20:08:50,731 INFO  L895   garLoopResultBuilder]: At program point L696(line 696) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,731 INFO  L895   garLoopResultBuilder]: At program point L696-1(lines 677 701) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,732 INFO  L899   garLoopResultBuilder]: For program point timeShiftFINAL(lines 645 668) no Hoare annotation was computed.
[2022-11-02 20:08:50,732 INFO  L895   garLoopResultBuilder]: At program point L131(lines 126 134) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1)))
[2022-11-02 20:08:50,732 INFO  L895   garLoopResultBuilder]: At program point L507(lines 502 509) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,732 INFO  L899   garLoopResultBuilder]: For program point L656-1(lines 656 662) no Hoare annotation was computed.
[2022-11-02 20:08:50,733 INFO  L895   garLoopResultBuilder]: At program point L751(lines 746 754) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1)))
[2022-11-02 20:08:50,733 INFO  L899   garLoopResultBuilder]: For program point L685(lines 685 693) no Hoare annotation was computed.
[2022-11-02 20:08:50,733 INFO  L899   garLoopResultBuilder]: For program point L524(lines 524 530) no Hoare annotation was computed.
[2022-11-02 20:08:50,733 INFO  L899   garLoopResultBuilder]: For program point L681(lines 681 698) no Hoare annotation was computed.
[2022-11-02 20:08:50,733 INFO  L899   garLoopResultBuilder]: For program point L520(lines 520 533) no Hoare annotation was computed.
[2022-11-02 20:08:50,734 INFO  L895   garLoopResultBuilder]: At program point L520-1(lines 512 536) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) (= |timeShift_getWaterLevel_#res#1| 1)))))
[2022-11-02 20:08:50,741 INFO  L899   garLoopResultBuilder]: For program point L62(lines 62 66) no Hoare annotation was computed.
[2022-11-02 20:08:50,741 INFO  L895   garLoopResultBuilder]: At program point L62-2(lines 58 69) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,742 INFO  L899   garLoopResultBuilder]: For program point L649-1(lines 648 667) no Hoare annotation was computed.
[2022-11-02 20:08:50,743 INFO  L895   garLoopResultBuilder]: At program point L732(lines 727 734) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,743 INFO  L895   garLoopResultBuilder]: At program point L691(line 691) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,744 INFO  L895   garLoopResultBuilder]: At program point timeShiftENTRY(lines 645 668) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,744 INFO  L895   garLoopResultBuilder]: At program point L683(line 683) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)))
[2022-11-02 20:08:50,744 INFO  L899   garLoopResultBuilder]: For program point timeShiftEXIT(lines 645 668) no Hoare annotation was computed.
[2022-11-02 20:08:50,744 INFO  L899   garLoopResultBuilder]: For program point L683-1(line 683) no Hoare annotation was computed.
[2022-11-02 20:08:50,745 INFO  L899   garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 506) no Hoare annotation was computed.
[2022-11-02 20:08:50,745 INFO  L899   garLoopResultBuilder]: For program point L546-1(line 546) no Hoare annotation was computed.
[2022-11-02 20:08:50,745 INFO  L899   garLoopResultBuilder]: For program point cleanupEXIT(lines 540 569) no Hoare annotation was computed.
[2022-11-02 20:08:50,748 INFO  L902   garLoopResultBuilder]: At program point cleanupENTRY(lines 540 569) the Hoare annotation is: true
[2022-11-02 20:08:50,749 INFO  L902   garLoopResultBuilder]: At program point L565(lines 540 569) the Hoare annotation is: true
[2022-11-02 20:08:50,749 INFO  L899   garLoopResultBuilder]: For program point L561(line 561) no Hoare annotation was computed.
[2022-11-02 20:08:50,749 INFO  L899   garLoopResultBuilder]: For program point L554(lines 554 558) no Hoare annotation was computed.
[2022-11-02 20:08:50,750 INFO  L902   garLoopResultBuilder]: At program point L554-1(lines 554 558) the Hoare annotation is: true
[2022-11-02 20:08:50,750 INFO  L899   garLoopResultBuilder]: For program point L551(line 551) no Hoare annotation was computed.
[2022-11-02 20:08:50,751 INFO  L902   garLoopResultBuilder]: At program point L550-2(lines 550 564) the Hoare annotation is: true
[2022-11-02 20:08:50,752 INFO  L902   garLoopResultBuilder]: At program point L546(line 546) the Hoare annotation is: true
[2022-11-02 20:08:50,753 INFO  L899   garLoopResultBuilder]: For program point L832(lines 832 843) no Hoare annotation was computed.
[2022-11-02 20:08:50,753 INFO  L895   garLoopResultBuilder]: At program point L824(line 824) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:08:50,753 INFO  L899   garLoopResultBuilder]: For program point L626(lines 626 633) no Hoare annotation was computed.
[2022-11-02 20:08:50,753 INFO  L899   garLoopResultBuilder]: For program point L626-2(lines 626 633) no Hoare annotation was computed.
[2022-11-02 20:08:50,754 INFO  L895   garLoopResultBuilder]: At program point L845(lines 802 847) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:08:50,755 INFO  L899   garLoopResultBuilder]: For program point L812(lines 812 818) no Hoare annotation was computed.
[2022-11-02 20:08:50,755 INFO  L899   garLoopResultBuilder]: For program point L812-1(lines 812 818) no Hoare annotation was computed.
[2022-11-02 20:08:50,755 INFO  L899   garLoopResultBuilder]: For program point L804(lines 804 808) no Hoare annotation was computed.
[2022-11-02 20:08:50,756 INFO  L902   garLoopResultBuilder]: At program point L610(lines 603 612) the Hoare annotation is: true
[2022-11-02 20:08:50,756 INFO  L899   garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed.
[2022-11-02 20:08:50,756 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed.
[2022-11-02 20:08:50,756 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed.
[2022-11-02 20:08:50,757 INFO  L902   garLoopResultBuilder]: At program point L635(lines 616 638) the Hoare annotation is: true
[2022-11-02 20:08:50,757 INFO  L895   garLoopResultBuilder]: At program point L887(lines 882 890) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1))
[2022-11-02 20:08:50,757 INFO  L895   garLoopResultBuilder]: At program point L879(lines 875 881) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1))
[2022-11-02 20:08:50,757 INFO  L899   garLoopResultBuilder]: For program point L838(lines 838 842) no Hoare annotation was computed.
[2022-11-02 20:08:50,759 INFO  L895   garLoopResultBuilder]: At program point L838-2(lines 832 843) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:08:50,759 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed.
[2022-11-02 20:08:50,759 INFO  L895   garLoopResultBuilder]: At program point L599(lines 595 601) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1))
[2022-11-02 20:08:50,760 INFO  L899   garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed.
[2022-11-02 20:08:50,760 INFO  L899   garLoopResultBuilder]: For program point L822-1(lines 822 828) no Hoare annotation was computed.
[2022-11-02 20:08:50,761 INFO  L902   garLoopResultBuilder]: At program point L851(lines 792 855) the Hoare annotation is: true
[2022-11-02 20:08:50,761 INFO  L895   garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:08:50,766 INFO  L895   garLoopResultBuilder]: At program point L872(lines 868 874) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1))
[2022-11-02 20:08:50,767 INFO  L895   garLoopResultBuilder]: At program point L848(lines 801 849) the Hoare annotation is: false
[2022-11-02 20:08:50,767 INFO  L899   garLoopResultBuilder]: For program point L803(lines 802 847) no Hoare annotation was computed.
[2022-11-02 20:08:50,767 INFO  L899   garLoopResultBuilder]: For program point waterRiseEXIT(lines 70 81) no Hoare annotation was computed.
[2022-11-02 20:08:50,767 INFO  L899   garLoopResultBuilder]: For program point L74-1(lines 70 81) no Hoare annotation was computed.
[2022-11-02 20:08:50,768 INFO  L895   garLoopResultBuilder]: At program point waterRiseENTRY(lines 70 81) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (not (= 1 ~systemActive~0)) (= |old(~waterLevel~0)| ~waterLevel~0))
[2022-11-02 20:08:50,768 INFO  L899   garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 669 675) no Hoare annotation was computed.
[2022-11-02 20:08:50,769 INFO  L902   garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 669 675) the Hoare annotation is: true
[2022-11-02 20:08:50,770 INFO  L902   garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 735 745) the Hoare annotation is: true
[2022-11-02 20:08:50,770 INFO  L899   garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 735 745) no Hoare annotation was computed.
[2022-11-02 20:08:50,770 INFO  L899   garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 735 745) no Hoare annotation was computed.
[2022-11-02 20:08:50,775 INFO  L902   garLoopResultBuilder]: At program point L99(lines 94 102) the Hoare annotation is: true
[2022-11-02 20:08:50,779 INFO  L444         BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1]
[2022-11-02 20:08:50,784 INFO  L178   ceAbstractionStarter]: Computing trace abstraction results
[2022-11-02 20:08:50,805 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:08:50 BoogieIcfgContainer
[2022-11-02 20:08:50,805 INFO  L132        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2022-11-02 20:08:50,806 INFO  L113        PluginConnector]: ------------------------Witness Printer----------------------------
[2022-11-02 20:08:50,807 INFO  L271        PluginConnector]: Initializing Witness Printer...
[2022-11-02 20:08:50,807 INFO  L275        PluginConnector]: Witness Printer initialized
[2022-11-02 20:08:50,808 INFO  L185        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:08:48" (3/4) ...
[2022-11-02 20:08:50,811 INFO  L137         WitnessPrinter]: Generating witness for correct program
[2022-11-02 20:08:50,819 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel
[2022-11-02 20:08:50,820 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift
[2022-11-02 20:08:50,820 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup
[2022-11-02 20:08:50,820 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise
[2022-11-02 20:08:50,821 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery
[2022-11-02 20:08:50,821 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm
[2022-11-02 20:08:50,832 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges
[2022-11-02 20:08:50,833 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges
[2022-11-02 20:08:50,834 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges
[2022-11-02 20:08:50,834 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges
[2022-11-02 20:08:50,835 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges
[2022-11-02 20:08:50,835 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2022-11-02 20:08:50,836 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2022-11-02 20:08:50,872 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(1 == systemActive)
[2022-11-02 20:08:50,874 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)
[2022-11-02 20:08:50,875 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))
[2022-11-02 20:08:50,876 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(1 == systemActive)
[2022-11-02 20:08:50,876 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))
[2022-11-02 20:08:50,877 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))
[2022-11-02 20:08:50,877 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || !(1 == systemActive)
[2022-11-02 20:08:50,920 INFO  L141         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/witness.graphml
[2022-11-02 20:08:50,920 INFO  L132        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2022-11-02 20:08:50,921 INFO  L158              Benchmark]: Toolchain (without parser) took 4097.63ms. Allocated memory was 155.2MB in the beginning and 188.7MB in the end (delta: 33.6MB). Free memory was 120.5MB in the beginning and 151.6MB in the end (delta: -31.0MB). Peak memory consumption was 1.0MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,922 INFO  L158              Benchmark]: CDTParser took 0.33ms. Allocated memory is still 100.7MB. Free memory was 55.7MB in the beginning and 55.6MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB.
[2022-11-02 20:08:50,922 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 580.82ms. Allocated memory is still 155.2MB. Free memory was 120.2MB in the beginning and 121.8MB in the end (delta: -1.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,923 INFO  L158              Benchmark]: Boogie Procedure Inliner took 88.29ms. Allocated memory is still 155.2MB. Free memory was 121.8MB in the beginning and 119.2MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,923 INFO  L158              Benchmark]: Boogie Preprocessor took 59.86ms. Allocated memory is still 155.2MB. Free memory was 119.2MB in the beginning and 117.6MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB.
[2022-11-02 20:08:50,923 INFO  L158              Benchmark]: RCFGBuilder took 574.57ms. Allocated memory is still 155.2MB. Free memory was 117.6MB in the beginning and 100.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,925 INFO  L158              Benchmark]: TraceAbstraction took 2670.98ms. Allocated memory was 155.2MB in the beginning and 188.7MB in the end (delta: 33.6MB). Free memory was 100.3MB in the beginning and 156.8MB in the end (delta: -56.5MB). Peak memory consumption was 39.7MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,925 INFO  L158              Benchmark]: Witness Printer took 114.32ms. Allocated memory is still 188.7MB. Free memory was 156.8MB in the beginning and 151.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB.
[2022-11-02 20:08:50,928 INFO  L339   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.33ms. Allocated memory is still 100.7MB. Free memory was 55.7MB in the beginning and 55.6MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 580.82ms. Allocated memory is still 155.2MB. Free memory was 120.2MB in the beginning and 121.8MB in the end (delta: -1.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 88.29ms. Allocated memory is still 155.2MB. Free memory was 121.8MB in the beginning and 119.2MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 59.86ms. Allocated memory is still 155.2MB. Free memory was 119.2MB in the beginning and 117.6MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB.
 * RCFGBuilder took 574.57ms. Allocated memory is still 155.2MB. Free memory was 117.6MB in the beginning and 100.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 2670.98ms. Allocated memory was 155.2MB in the beginning and 188.7MB in the end (delta: 33.6MB). Free memory was 100.3MB in the beginning and 156.8MB in the end (delta: -56.5MB). Peak memory consumption was 39.7MB. Max. memory is 16.1GB.
 * Witness Printer took 114.32ms. Allocated memory is still 188.7MB. Free memory was 156.8MB in the beginning and 151.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - PositiveResult [Line: 506]: call to reach_error is unreachable
    For all program executions holds that call to reach_error is unreachable at this location
  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 7 procedures, 71 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.5s, OverallIterations: 6, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 179 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 175 mSDsluCounter, 700 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 329 mSDsCounter, 11 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 63 IncrementalHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 11 mSolverCounterUnsat, 371 mSDtfsCounter, 63 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 34 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=92occurred in iteration=4, InterpolantAutomatonStates: 22, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 6 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 33 LocationsWithAnnotation, 183 PreInvPairs, 205 NumberOfFragments, 301 HoareAnnotationTreeSize, 183 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 33 FomulaSimplificationsInter, 378 FormulaSimplificationTreeSizeReductionInter, 0.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 156 NumberOfCodeBlocks, 156 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 150 ConstructedInterpolants, 0 QuantifiedInterpolants, 320 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available
  - AllSpecificationsHoldResult: All specifications hold
    1 specifications checked. All of them hold
  - InvariantResult [Line: 550]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 603]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 677]: Loop Invariant
    Derived loop invariant: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)
  - InvariantResult [Line: 875]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1
  - InvariantResult [Line: 126]: Loop Invariant
    Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))
  - InvariantResult [Line: 502]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || !(1 == systemActive)
  - InvariantResult [Line: 882]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1
  - InvariantResult [Line: 616]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 512]: Loop Invariant
    Derived loop invariant: ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))
  - InvariantResult [Line: 595]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1
  - InvariantResult [Line: 727]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || !(1 == systemActive)
  - InvariantResult [Line: 58]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || !(1 == systemActive)
  - InvariantResult [Line: 746]: Loop Invariant
    Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))
  - InvariantResult [Line: 540]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 801]: Loop Invariant
    Derived loop invariant: 0
  - InvariantResult [Line: 792]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 94]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 868]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1
  - InvariantResult [Line: 802]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0
RESULT: Ultimate proved your program to be correct!
[2022-11-02 20:08:51,006 INFO  L540       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_82d45005-db5a-4422-993a-0cf0c2649d2d/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Result:
TRUE