./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version 5e519f3a
Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a933c7098679a6972748d486040a9bdf507acce33a33e1309286157bdff8c762
--- Real Ultimate output ---
[0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset.
This is Ultimate 0.2.2-dev-5e519f3
[2022-11-02 20:54:39,571 INFO  L177        SettingsManager]: Resetting all preferences to default values...
[2022-11-02 20:54:39,575 INFO  L181        SettingsManager]: Resetting UltimateCore preferences to default values
[2022-11-02 20:54:39,622 INFO  L184        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2022-11-02 20:54:39,623 INFO  L181        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2022-11-02 20:54:39,627 INFO  L181        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2022-11-02 20:54:39,629 INFO  L181        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2022-11-02 20:54:39,634 INFO  L181        SettingsManager]: Resetting LassoRanker preferences to default values
[2022-11-02 20:54:39,637 INFO  L181        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2022-11-02 20:54:39,643 INFO  L181        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2022-11-02 20:54:39,644 INFO  L181        SettingsManager]: Resetting Sifa preferences to default values
[2022-11-02 20:54:39,647 INFO  L184        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2022-11-02 20:54:39,648 INFO  L181        SettingsManager]: Resetting LTL2Aut preferences to default values
[2022-11-02 20:54:39,650 INFO  L181        SettingsManager]: Resetting PEA to Boogie preferences to default values
[2022-11-02 20:54:39,652 INFO  L181        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2022-11-02 20:54:39,654 INFO  L181        SettingsManager]: Resetting ChcToBoogie preferences to default values
[2022-11-02 20:54:39,656 INFO  L181        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2022-11-02 20:54:39,657 INFO  L181        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2022-11-02 20:54:39,658 INFO  L181        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2022-11-02 20:54:39,665 INFO  L181        SettingsManager]: Resetting CodeCheck preferences to default values
[2022-11-02 20:54:39,667 INFO  L181        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2022-11-02 20:54:39,669 INFO  L181        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2022-11-02 20:54:39,672 INFO  L181        SettingsManager]: Resetting Referee preferences to default values
[2022-11-02 20:54:39,673 INFO  L181        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2022-11-02 20:54:39,681 INFO  L184        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2022-11-02 20:54:39,682 INFO  L184        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2022-11-02 20:54:39,682 INFO  L181        SettingsManager]: Resetting TreeAutomizer preferences to default values
[2022-11-02 20:54:39,684 INFO  L181        SettingsManager]: Resetting IcfgToChc preferences to default values
[2022-11-02 20:54:39,684 INFO  L181        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2022-11-02 20:54:39,686 INFO  L184        SettingsManager]: ReqToTest provides no preferences, ignoring...
[2022-11-02 20:54:39,686 INFO  L181        SettingsManager]: Resetting Boogie Printer preferences to default values
[2022-11-02 20:54:39,687 INFO  L181        SettingsManager]: Resetting ChcSmtPrinter preferences to default values
[2022-11-02 20:54:39,689 INFO  L181        SettingsManager]: Resetting ReqPrinter preferences to default values
[2022-11-02 20:54:39,691 INFO  L181        SettingsManager]: Resetting Witness Printer preferences to default values
[2022-11-02 20:54:39,692 INFO  L184        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2022-11-02 20:54:39,692 INFO  L181        SettingsManager]: Resetting CDTParser preferences to default values
[2022-11-02 20:54:39,693 INFO  L184        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2022-11-02 20:54:39,693 INFO  L184        SettingsManager]: ReqParser provides no preferences, ignoring...
[2022-11-02 20:54:39,693 INFO  L181        SettingsManager]: Resetting SmtParser preferences to default values
[2022-11-02 20:54:39,694 INFO  L181        SettingsManager]: Resetting Witness Parser preferences to default values
[2022-11-02 20:54:39,695 INFO  L188        SettingsManager]: Finished resetting all preferences to default values...
[2022-11-02 20:54:39,697 INFO  L101        SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf
[2022-11-02 20:54:39,725 INFO  L113        SettingsManager]: Loading preferences was successful
[2022-11-02 20:54:39,725 INFO  L115        SettingsManager]: Preferences different from defaults after loading the file:
[2022-11-02 20:54:39,726 INFO  L136        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2022-11-02 20:54:39,726 INFO  L138        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2022-11-02 20:54:39,727 INFO  L136        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2022-11-02 20:54:39,727 INFO  L138        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2022-11-02 20:54:39,728 INFO  L136        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2022-11-02 20:54:39,728 INFO  L138        SettingsManager]:  * Create parallel compositions if possible=false
[2022-11-02 20:54:39,728 INFO  L138        SettingsManager]:  * Use SBE=true
[2022-11-02 20:54:39,729 INFO  L136        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2022-11-02 20:54:39,729 INFO  L138        SettingsManager]:  * sizeof long=4
[2022-11-02 20:54:39,729 INFO  L138        SettingsManager]:  * Overapproximate operations on floating types=true
[2022-11-02 20:54:39,729 INFO  L138        SettingsManager]:  * sizeof POINTER=4
[2022-11-02 20:54:39,729 INFO  L138        SettingsManager]:  * Check division by zero=IGNORE
[2022-11-02 20:54:39,730 INFO  L138        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2022-11-02 20:54:39,730 INFO  L138        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2022-11-02 20:54:39,730 INFO  L138        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2022-11-02 20:54:39,730 INFO  L138        SettingsManager]:  * sizeof long double=12
[2022-11-02 20:54:39,731 INFO  L138        SettingsManager]:  * Check if freed pointer was valid=false
[2022-11-02 20:54:39,731 INFO  L138        SettingsManager]:  * Use constant arrays=true
[2022-11-02 20:54:39,731 INFO  L138        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2022-11-02 20:54:39,731 INFO  L136        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2022-11-02 20:54:39,731 INFO  L138        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2022-11-02 20:54:39,732 INFO  L138        SettingsManager]:  * SMT solver=External_DefaultMode
[2022-11-02 20:54:39,732 INFO  L138        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2022-11-02 20:54:39,732 INFO  L136        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2022-11-02 20:54:39,732 INFO  L138        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2022-11-02 20:54:39,733 INFO  L138        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2022-11-02 20:54:39,733 INFO  L138        SettingsManager]:  * Trace refinement strategy=CAMEL
[2022-11-02 20:54:39,733 INFO  L138        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2022-11-02 20:54:39,733 INFO  L138        SettingsManager]:  * Apply one-shot large block encoding in concurrent analysis=false
[2022-11-02 20:54:39,733 INFO  L138        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2022-11-02 20:54:39,734 INFO  L138        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2022-11-02 20:54:39,734 INFO  L138        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a933c7098679a6972748d486040a9bdf507acce33a33e1309286157bdff8c762
[2022-11-02 20:54:39,992 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2022-11-02 20:54:40,035 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2022-11-02 20:54:40,039 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2022-11-02 20:54:40,040 INFO  L271        PluginConnector]: Initializing CDTParser...
[2022-11-02 20:54:40,041 INFO  L275        PluginConnector]: CDTParser initialized
[2022-11-02 20:54:40,043 INFO  L432   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c
[2022-11-02 20:54:40,148 INFO  L220              CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/data/6fbd0dbce/9f861b440c3e48a59d6dcd052acd9fa4/FLAG2ffa964e8
[2022-11-02 20:54:40,615 INFO  L306              CDTParser]: Found 1 translation units.
[2022-11-02 20:54:40,619 INFO  L160              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c
[2022-11-02 20:54:40,634 INFO  L349              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/data/6fbd0dbce/9f861b440c3e48a59d6dcd052acd9fa4/FLAG2ffa964e8
[2022-11-02 20:54:40,986 INFO  L357              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/data/6fbd0dbce/9f861b440c3e48a59d6dcd052acd9fa4
[2022-11-02 20:54:40,989 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2022-11-02 20:54:40,990 INFO  L131        ToolchainWalker]: Walking toolchain with 6 elements.
[2022-11-02 20:54:40,995 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2022-11-02 20:54:40,995 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2022-11-02 20:54:40,998 INFO  L275        PluginConnector]: CACSL2BoogieTranslator initialized
[2022-11-02 20:54:40,999 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:54:40" (1/1) ...
[2022-11-02 20:54:41,000 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@775eaf33 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:40, skipping insertion in model container
[2022-11-02 20:54:41,000 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:54:40" (1/1) ...
[2022-11-02 20:54:41,007 INFO  L145         MainTranslator]: Starting translation in SV-COMP mode 
[2022-11-02 20:54:41,053 INFO  L178         MainTranslator]: Built tables and reachable declarations
[2022-11-02 20:54:41,470 WARN  L230   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c[18260,18273]
[2022-11-02 20:54:41,479 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2022-11-02 20:54:41,496 INFO  L203         MainTranslator]: Completed pre-run
[2022-11-02 20:54:41,578 WARN  L230   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/sv-benchmarks/c/product-lines/minepump_spec4_product24.cil.c[18260,18273]
[2022-11-02 20:54:41,579 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2022-11-02 20:54:41,600 INFO  L208         MainTranslator]: Completed translation
[2022-11-02 20:54:41,600 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41 WrapperNode
[2022-11-02 20:54:41,600 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2022-11-02 20:54:41,602 INFO  L113        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2022-11-02 20:54:41,602 INFO  L271        PluginConnector]: Initializing Boogie Procedure Inliner...
[2022-11-02 20:54:41,602 INFO  L275        PluginConnector]: Boogie Procedure Inliner initialized
[2022-11-02 20:54:41,610 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,624 INFO  L185        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,652 INFO  L138                Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 251
[2022-11-02 20:54:41,653 INFO  L132        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2022-11-02 20:54:41,654 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2022-11-02 20:54:41,654 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2022-11-02 20:54:41,654 INFO  L275        PluginConnector]: Boogie Preprocessor initialized
[2022-11-02 20:54:41,664 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,664 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,667 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,667 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,674 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,679 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,681 INFO  L185        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,683 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,685 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2022-11-02 20:54:41,686 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2022-11-02 20:54:41,686 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2022-11-02 20:54:41,687 INFO  L275        PluginConnector]: RCFGBuilder initialized
[2022-11-02 20:54:41,688 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (1/1) ...
[2022-11-02 20:54:41,702 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2022-11-02 20:54:41,726 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/z3
[2022-11-02 20:54:41,738 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
[2022-11-02 20:54:41,750 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process
[2022-11-02 20:54:41,782 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2022-11-02 20:54:41,783 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base
[2022-11-02 20:54:41,783 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base
[2022-11-02 20:54:41,783 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2022-11-02 20:54:41,783 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2022-11-02 20:54:41,784 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2022-11-02 20:54:41,784 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2022-11-02 20:54:41,784 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2022-11-02 20:54:41,784 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2022-11-02 20:54:41,784 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor
[2022-11-02 20:54:41,785 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor
[2022-11-02 20:54:41,785 INFO  L130     BoogieDeclarations]: Found specification of procedure deactivatePump
[2022-11-02 20:54:41,785 INFO  L138     BoogieDeclarations]: Found implementation of procedure deactivatePump
[2022-11-02 20:54:41,785 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int
[2022-11-02 20:54:41,785 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2022-11-02 20:54:41,785 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2022-11-02 20:54:41,786 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2022-11-02 20:54:41,786 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2022-11-02 20:54:41,865 INFO  L235             CfgBuilder]: Building ICFG
[2022-11-02 20:54:41,868 INFO  L261             CfgBuilder]: Building CFG for each procedure with an implementation
[2022-11-02 20:54:42,337 INFO  L276             CfgBuilder]: Performing block encoding
[2022-11-02 20:54:42,346 INFO  L295             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2022-11-02 20:54:42,346 INFO  L300             CfgBuilder]: Removed 2 assume(true) statements.
[2022-11-02 20:54:42,349 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:42 BoogieIcfgContainer
[2022-11-02 20:54:42,349 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2022-11-02 20:54:42,352 INFO  L113        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2022-11-02 20:54:42,352 INFO  L271        PluginConnector]: Initializing TraceAbstraction...
[2022-11-02 20:54:42,356 INFO  L275        PluginConnector]: TraceAbstraction initialized
[2022-11-02 20:54:42,357 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:54:40" (1/3) ...
[2022-11-02 20:54:42,357 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a0559c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:54:42, skipping insertion in model container
[2022-11-02 20:54:42,358 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:41" (2/3) ...
[2022-11-02 20:54:42,358 INFO  L205        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a0559c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:54:42, skipping insertion in model container
[2022-11-02 20:54:42,358 INFO  L185        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:42" (3/3) ...
[2022-11-02 20:54:42,360 INFO  L112   eAbstractionObserver]: Analyzing ICFG minepump_spec4_product24.cil.c
[2022-11-02 20:54:42,386 INFO  L203   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2022-11-02 20:54:42,387 INFO  L162   ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations.
[2022-11-02 20:54:42,440 INFO  L356      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2022-11-02 20:54:42,446 INFO  L357      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@535946e5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms]
[2022-11-02 20:54:42,447 INFO  L358      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2022-11-02 20:54:42,451 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 87 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 74 states have internal predecessors, (90), 13 states have call successors, (13), 7 states have call predecessors, (13), 7 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13)
[2022-11-02 20:54:42,464 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2022-11-02 20:54:42,464 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:42,465 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:42,466 INFO  L420      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:42,476 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:42,476 INFO  L85        PathProgramCache]: Analyzing trace with hash 488850844, now seen corresponding path program 1 times
[2022-11-02 20:54:42,486 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:42,487 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54498303]
[2022-11-02 20:54:42,488 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:42,488 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:42,681 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:42,800 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:42,801 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:42,802 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54498303]
[2022-11-02 20:54:42,804 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54498303] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:42,804 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:42,804 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2022-11-02 20:54:42,807 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576458418]
[2022-11-02 20:54:42,808 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:42,813 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2022-11-02 20:54:42,815 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:42,855 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2022-11-02 20:54:42,856 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2022-11-02 20:54:42,860 INFO  L87              Difference]: Start difference. First operand  has 87 states, 65 states have (on average 1.3846153846153846) internal successors, (90), 74 states have internal predecessors, (90), 13 states have call successors, (13), 7 states have call predecessors, (13), 7 states have return successors, (13), 9 states have call predecessors, (13), 13 states have call successors, (13) Second operand  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:42,922 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:42,922 INFO  L93              Difference]: Finished difference Result 166 states and 227 transitions.
[2022-11-02 20:54:42,923 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2022-11-02 20:54:42,925 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2022-11-02 20:54:42,925 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:42,937 INFO  L225             Difference]: With dead ends: 166
[2022-11-02 20:54:42,937 INFO  L226             Difference]: Without dead ends: 78
[2022-11-02 20:54:42,942 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2022-11-02 20:54:42,946 INFO  L413           NwaCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:42,947 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:54:42,962 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 78 states.
[2022-11-02 20:54:42,999 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78.
[2022-11-02 20:54:43,001 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 78 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 66 states have internal predecessors, (76), 13 states have call successors, (13), 7 states have call predecessors, (13), 6 states have return successors, (12), 8 states have call predecessors, (12), 12 states have call successors, (12)
[2022-11-02 20:54:43,003 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions.
[2022-11-02 20:54:43,004 INFO  L78                 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 19
[2022-11-02 20:54:43,005 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:43,005 INFO  L495      AbstractCegarLoop]: Abstraction has 78 states and 101 transitions.
[2022-11-02 20:54:43,006 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,006 INFO  L276                IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions.
[2022-11-02 20:54:43,008 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 21
[2022-11-02 20:54:43,008 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:43,009 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:43,009 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2022-11-02 20:54:43,009 INFO  L420      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:43,010 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:43,011 INFO  L85        PathProgramCache]: Analyzing trace with hash -2030303846, now seen corresponding path program 1 times
[2022-11-02 20:54:43,011 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:43,011 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308244255]
[2022-11-02 20:54:43,011 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:43,012 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:43,039 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:43,135 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:43,135 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:43,136 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308244255]
[2022-11-02 20:54:43,136 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308244255] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:43,136 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:43,136 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2022-11-02 20:54:43,136 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280407531]
[2022-11-02 20:54:43,137 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:43,138 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2022-11-02 20:54:43,138 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:43,139 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2022-11-02 20:54:43,139 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:54:43,139 INFO  L87              Difference]: Start difference. First operand 78 states and 101 transitions. Second operand  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,159 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:43,162 INFO  L93              Difference]: Finished difference Result 117 states and 151 transitions.
[2022-11-02 20:54:43,164 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2022-11-02 20:54:43,164 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20
[2022-11-02 20:54:43,164 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:43,170 INFO  L225             Difference]: With dead ends: 117
[2022-11-02 20:54:43,171 INFO  L226             Difference]: Without dead ends: 69
[2022-11-02 20:54:43,174 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:54:43,177 INFO  L413           NwaCegarLoop]: 88 mSDtfsCounter, 17 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:43,178 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 154 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:54:43,181 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 69 states.
[2022-11-02 20:54:43,189 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69.
[2022-11-02 20:54:43,190 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 69 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 60 states have internal predecessors, (69), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 6 states have call predecessors, (10), 10 states have call successors, (10)
[2022-11-02 20:54:43,191 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions.
[2022-11-02 20:54:43,192 INFO  L78                 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 20
[2022-11-02 20:54:43,192 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:43,192 INFO  L495      AbstractCegarLoop]: Abstraction has 69 states and 89 transitions.
[2022-11-02 20:54:43,193 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,193 INFO  L276                IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions.
[2022-11-02 20:54:43,194 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 26
[2022-11-02 20:54:43,194 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:43,194 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:43,195 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2022-11-02 20:54:43,195 INFO  L420      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:43,196 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:43,196 INFO  L85        PathProgramCache]: Analyzing trace with hash -2108405867, now seen corresponding path program 1 times
[2022-11-02 20:54:43,196 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:43,197 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214234992]
[2022-11-02 20:54:43,197 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:43,197 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:43,222 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:43,333 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:43,333 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:43,333 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214234992]
[2022-11-02 20:54:43,334 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214234992] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:43,334 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:43,334 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2022-11-02 20:54:43,334 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [487377524]
[2022-11-02 20:54:43,335 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:43,335 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2022-11-02 20:54:43,335 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:43,336 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2022-11-02 20:54:43,336 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2022-11-02 20:54:43,336 INFO  L87              Difference]: Start difference. First operand 69 states and 89 transitions. Second operand  has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,439 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:43,440 INFO  L93              Difference]: Finished difference Result 169 states and 222 transitions.
[2022-11-02 20:54:43,440 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2022-11-02 20:54:43,440 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25
[2022-11-02 20:54:43,441 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:43,443 INFO  L225             Difference]: With dead ends: 169
[2022-11-02 20:54:43,443 INFO  L226             Difference]: Without dead ends: 107
[2022-11-02 20:54:43,444 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56
[2022-11-02 20:54:43,445 INFO  L413           NwaCegarLoop]: 97 mSDtfsCounter, 152 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:43,446 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 287 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:54:43,447 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 107 states.
[2022-11-02 20:54:43,462 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 104.
[2022-11-02 20:54:43,463 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 104 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 90 states have internal predecessors, (107), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (15), 9 states have call predecessors, (15), 14 states have call successors, (15)
[2022-11-02 20:54:43,464 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 136 transitions.
[2022-11-02 20:54:43,465 INFO  L78                 Accepts]: Start accepts. Automaton has 104 states and 136 transitions. Word has length 25
[2022-11-02 20:54:43,465 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:43,465 INFO  L495      AbstractCegarLoop]: Abstraction has 104 states and 136 transitions.
[2022-11-02 20:54:43,466 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,466 INFO  L276                IsEmpty]: Start isEmpty. Operand 104 states and 136 transitions.
[2022-11-02 20:54:43,467 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 29
[2022-11-02 20:54:43,467 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:43,468 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:43,468 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2022-11-02 20:54:43,468 INFO  L420      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:43,469 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:43,469 INFO  L85        PathProgramCache]: Analyzing trace with hash -1698329658, now seen corresponding path program 1 times
[2022-11-02 20:54:43,469 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:43,470 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118919199]
[2022-11-02 20:54:43,470 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:43,470 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:43,489 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:43,706 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:43,707 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:43,712 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118919199]
[2022-11-02 20:54:43,712 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118919199] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:43,713 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:43,713 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4
[2022-11-02 20:54:43,713 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430924598]
[2022-11-02 20:54:43,713 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:43,714 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2022-11-02 20:54:43,714 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:43,714 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2022-11-02 20:54:43,715 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2022-11-02 20:54:43,715 INFO  L87              Difference]: Start difference. First operand 104 states and 136 transitions. Second operand  has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,822 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:43,826 INFO  L93              Difference]: Finished difference Result 286 states and 391 transitions.
[2022-11-02 20:54:43,827 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2022-11-02 20:54:43,827 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28
[2022-11-02 20:54:43,827 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:43,831 INFO  L225             Difference]: With dead ends: 286
[2022-11-02 20:54:43,833 INFO  L226             Difference]: Without dead ends: 189
[2022-11-02 20:54:43,834 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42
[2022-11-02 20:54:43,836 INFO  L413           NwaCegarLoop]: 93 mSDtfsCounter, 61 mSDsluCounter, 264 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:43,840 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 357 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2022-11-02 20:54:43,841 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 189 states.
[2022-11-02 20:54:43,883 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 189.
[2022-11-02 20:54:43,885 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 189 states, 142 states have (on average 1.3380281690140845) internal successors, (190), 161 states have internal predecessors, (190), 28 states have call successors, (28), 20 states have call predecessors, (28), 18 states have return successors, (33), 16 states have call predecessors, (33), 28 states have call successors, (33)
[2022-11-02 20:54:43,890 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 251 transitions.
[2022-11-02 20:54:43,891 INFO  L78                 Accepts]: Start accepts. Automaton has 189 states and 251 transitions. Word has length 28
[2022-11-02 20:54:43,891 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:43,891 INFO  L495      AbstractCegarLoop]: Abstraction has 189 states and 251 transitions.
[2022-11-02 20:54:43,891 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:43,892 INFO  L276                IsEmpty]: Start isEmpty. Operand 189 states and 251 transitions.
[2022-11-02 20:54:43,901 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 31
[2022-11-02 20:54:43,901 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:43,902 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:43,902 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2022-11-02 20:54:43,902 INFO  L420      AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:43,904 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:43,904 INFO  L85        PathProgramCache]: Analyzing trace with hash 1391340363, now seen corresponding path program 1 times
[2022-11-02 20:54:43,905 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:43,906 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [38933135]
[2022-11-02 20:54:43,906 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:43,907 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:43,938 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:44,030 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:44,030 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:44,031 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [38933135]
[2022-11-02 20:54:44,032 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [38933135] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:44,032 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:44,032 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2022-11-02 20:54:44,034 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883716573]
[2022-11-02 20:54:44,034 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:44,035 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2022-11-02 20:54:44,035 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:44,035 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2022-11-02 20:54:44,036 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:54:44,036 INFO  L87              Difference]: Start difference. First operand 189 states and 251 transitions. Second operand  has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:44,069 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:44,069 INFO  L93              Difference]: Finished difference Result 325 states and 440 transitions.
[2022-11-02 20:54:44,070 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2022-11-02 20:54:44,071 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30
[2022-11-02 20:54:44,073 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:44,077 INFO  L225             Difference]: With dead ends: 325
[2022-11-02 20:54:44,077 INFO  L226             Difference]: Without dead ends: 143
[2022-11-02 20:54:44,078 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2022-11-02 20:54:44,084 INFO  L413           NwaCegarLoop]: 54 mSDtfsCounter, 39 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:44,085 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 54 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2022-11-02 20:54:44,088 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 143 states.
[2022-11-02 20:54:44,121 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 141.
[2022-11-02 20:54:44,125 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 141 states, 110 states have (on average 1.2545454545454546) internal successors, (138), 117 states have internal predecessors, (138), 16 states have call successors, (16), 16 states have call predecessors, (16), 14 states have return successors, (18), 14 states have call predecessors, (18), 16 states have call successors, (18)
[2022-11-02 20:54:44,130 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 172 transitions.
[2022-11-02 20:54:44,130 INFO  L78                 Accepts]: Start accepts. Automaton has 141 states and 172 transitions. Word has length 30
[2022-11-02 20:54:44,131 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:44,131 INFO  L495      AbstractCegarLoop]: Abstraction has 141 states and 172 transitions.
[2022-11-02 20:54:44,131 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:44,131 INFO  L276                IsEmpty]: Start isEmpty. Operand 141 states and 172 transitions.
[2022-11-02 20:54:44,132 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 33
[2022-11-02 20:54:44,133 INFO  L187           NwaCegarLoop]: Found error trace
[2022-11-02 20:54:44,134 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:44,134 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4
[2022-11-02 20:54:44,135 INFO  L420      AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2022-11-02 20:54:44,135 INFO  L144       PredicateUnifier]: Initialized classic predicate unifier
[2022-11-02 20:54:44,137 INFO  L85        PathProgramCache]: Analyzing trace with hash -52551700, now seen corresponding path program 1 times
[2022-11-02 20:54:44,137 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2022-11-02 20:54:44,137 INFO  L333   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247926645]
[2022-11-02 20:54:44,138 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2022-11-02 20:54:44,138 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2022-11-02 20:54:44,156 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:44,279 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11
[2022-11-02 20:54:44,282 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2022-11-02 20:54:44,285 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2022-11-02 20:54:44,287 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2022-11-02 20:54:44,287 INFO  L333   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247926645]
[2022-11-02 20:54:44,287 INFO  L157   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247926645] provided 1 perfect and 0 imperfect interpolant sequences
[2022-11-02 20:54:44,287 INFO  L184   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2022-11-02 20:54:44,287 INFO  L197   FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6
[2022-11-02 20:54:44,288 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [538709057]
[2022-11-02 20:54:44,288 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2022-11-02 20:54:44,289 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2022-11-02 20:54:44,289 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2022-11-02 20:54:44,290 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2022-11-02 20:54:44,290 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30
[2022-11-02 20:54:44,290 INFO  L87              Difference]: Start difference. First operand 141 states and 172 transitions. Second operand  has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:54:44,425 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2022-11-02 20:54:44,425 INFO  L93              Difference]: Finished difference Result 151 states and 183 transitions.
[2022-11-02 20:54:44,425 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2022-11-02 20:54:44,426 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32
[2022-11-02 20:54:44,426 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2022-11-02 20:54:44,426 INFO  L225             Difference]: With dead ends: 151
[2022-11-02 20:54:44,427 INFO  L226             Difference]: Without dead ends: 0
[2022-11-02 20:54:44,428 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72
[2022-11-02 20:54:44,432 INFO  L413           NwaCegarLoop]: 50 mSDtfsCounter, 54 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2022-11-02 20:54:44,435 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 154 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2022-11-02 20:54:44,436 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 0 states.
[2022-11-02 20:54:44,436 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0.
[2022-11-02 20:54:44,436 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2022-11-02 20:54:44,437 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions.
[2022-11-02 20:54:44,437 INFO  L78                 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 32
[2022-11-02 20:54:44,438 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2022-11-02 20:54:44,439 INFO  L495      AbstractCegarLoop]: Abstraction has 0 states and 0 transitions.
[2022-11-02 20:54:44,439 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2022-11-02 20:54:44,439 INFO  L276                IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions.
[2022-11-02 20:54:44,439 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2022-11-02 20:54:44,442 INFO  L805   garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2022-11-02 20:54:44,443 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5
[2022-11-02 20:54:44,446 INFO  L343    DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions.
[2022-11-02 20:54:45,257 INFO  L902   garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 693 700) the Hoare annotation is: true
[2022-11-02 20:54:45,257 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 693 700) no Hoare annotation was computed.
[2022-11-02 20:54:45,257 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 693 700) no Hoare annotation was computed.
[2022-11-02 20:54:45,258 INFO  L899   garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 626 632) no Hoare annotation was computed.
[2022-11-02 20:54:45,258 INFO  L902   garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 626 632) the Hoare annotation is: true
[2022-11-02 20:54:45,258 INFO  L899   garLoopResultBuilder]: For program point L831-1(lines 827 838) no Hoare annotation was computed.
[2022-11-02 20:54:45,258 INFO  L902   garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 827 838) the Hoare annotation is: true
[2022-11-02 20:54:45,258 INFO  L899   garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 827 838) no Hoare annotation was computed.
[2022-11-02 20:54:45,258 INFO  L899   garLoopResultBuilder]: For program point L956(line 956) no Hoare annotation was computed.
[2022-11-02 20:54:45,259 INFO  L895   garLoopResultBuilder]: At program point L717(lines 712 720) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |timeShift_isPumpRunning_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)))))
[2022-11-02 20:54:45,259 INFO  L899   garLoopResultBuilder]: For program point L903(lines 903 909) no Hoare annotation was computed.
[2022-11-02 20:54:45,259 INFO  L899   garLoopResultBuilder]: For program point timeShiftFINAL(lines 602 625) no Hoare annotation was computed.
[2022-11-02 20:54:45,259 INFO  L899   garLoopResultBuilder]: For program point L899(lines 899 912) no Hoare annotation was computed.
[2022-11-02 20:54:45,259 INFO  L895   garLoopResultBuilder]: At program point L899-1(lines 891 915) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~8#1| 1) (= |timeShift_getWaterLevel_#res#1| 1)))))
[2022-11-02 20:54:45,260 INFO  L899   garLoopResultBuilder]: For program point L606-1(lines 605 624) no Hoare annotation was computed.
[2022-11-02 20:54:45,260 INFO  L895   garLoopResultBuilder]: At program point L957(lines 952 959) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,260 INFO  L899   garLoopResultBuilder]: For program point L668(lines 668 676) no Hoare annotation was computed.
[2022-11-02 20:54:45,260 INFO  L899   garLoopResultBuilder]: For program point L664(lines 664 681) no Hoare annotation was computed.
[2022-11-02 20:54:45,260 INFO  L895   garLoopResultBuilder]: At program point L876(lines 871 879) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1))))
[2022-11-02 20:54:45,260 INFO  L895   garLoopResultBuilder]: At program point L674(line 674) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,261 INFO  L895   garLoopResultBuilder]: At program point L670(line 670) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,261 INFO  L895   garLoopResultBuilder]: At program point timeShiftENTRY(lines 602 625) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))
[2022-11-02 20:54:45,261 INFO  L895   garLoopResultBuilder]: At program point L844(lines 839 847) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,261 INFO  L899   garLoopResultBuilder]: For program point timeShiftEXIT(lines 602 625) no Hoare annotation was computed.
[2022-11-02 20:54:45,261 INFO  L899   garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 956) no Hoare annotation was computed.
[2022-11-02 20:54:45,261 INFO  L899   garLoopResultBuilder]: For program point L807(lines 807 811) no Hoare annotation was computed.
[2022-11-02 20:54:45,262 INFO  L895   garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= 0 ~systemActive~0))))
[2022-11-02 20:54:45,262 INFO  L895   garLoopResultBuilder]: At program point L679-1(lines 660 684) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (not (= 0 ~systemActive~0))))
[2022-11-02 20:54:45,262 INFO  L895   garLoopResultBuilder]: At program point L807-2(lines 803 814) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,262 INFO  L895   garLoopResultBuilder]: At program point L708(lines 701 711) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2022-11-02 20:54:45,262 INFO  L899   garLoopResultBuilder]: For program point L613-1(lines 613 619) no Hoare annotation was computed.
[2022-11-02 20:54:45,263 INFO  L902   garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true
[2022-11-02 20:54:45,263 INFO  L899   garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed.
[2022-11-02 20:54:45,263 INFO  L899   garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed.
[2022-11-02 20:54:45,263 INFO  L902   garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true
[2022-11-02 20:54:45,263 INFO  L902   garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true
[2022-11-02 20:54:45,263 INFO  L902   garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true
[2022-11-02 20:54:45,263 INFO  L899   garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed.
[2022-11-02 20:54:45,264 INFO  L902   garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true
[2022-11-02 20:54:45,264 INFO  L899   garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed.
[2022-11-02 20:54:45,264 INFO  L899   garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed.
[2022-11-02 20:54:45,264 INFO  L902   garLoopResultBuilder]: At program point L585(lines 522 589) the Hoare annotation is: true
[2022-11-02 20:54:45,264 INFO  L899   garLoopResultBuilder]: For program point L552(lines 552 558) no Hoare annotation was computed.
[2022-11-02 20:54:45,264 INFO  L899   garLoopResultBuilder]: For program point L552-1(lines 552 558) no Hoare annotation was computed.
[2022-11-02 20:54:45,264 INFO  L895   garLoopResultBuilder]: At program point L932(lines 928 934) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)))
[2022-11-02 20:54:45,265 INFO  L895   garLoopResultBuilder]: At program point L544(line 544) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:54:45,265 INFO  L899   garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed.
[2022-11-02 20:54:45,265 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed.
[2022-11-02 20:54:45,265 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed.
[2022-11-02 20:54:45,265 INFO  L895   garLoopResultBuilder]: At program point L796(lines 791 798) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0)))
[2022-11-02 20:54:45,265 INFO  L895   garLoopResultBuilder]: At program point L788(lines 776 790) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:54:45,266 INFO  L899   garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed.
[2022-11-02 20:54:45,266 INFO  L899   garLoopResultBuilder]: For program point L780(lines 780 786) no Hoare annotation was computed.
[2022-11-02 20:54:45,266 INFO  L899   garLoopResultBuilder]: For program point L780-1(lines 780 786) no Hoare annotation was computed.
[2022-11-02 20:54:45,266 INFO  L899   garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed.
[2022-11-02 20:54:45,266 INFO  L895   garLoopResultBuilder]: At program point L582(lines 531 583) the Hoare annotation is: false
[2022-11-02 20:54:45,266 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed.
[2022-11-02 20:54:45,266 INFO  L902   garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true
[2022-11-02 20:54:45,267 INFO  L899   garLoopResultBuilder]: For program point L570(lines 570 576) no Hoare annotation was computed.
[2022-11-02 20:54:45,267 INFO  L895   garLoopResultBuilder]: At program point L570-2(lines 562 577) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:54:45,267 INFO  L899   garLoopResultBuilder]: For program point L533(lines 532 581) no Hoare annotation was computed.
[2022-11-02 20:54:45,267 INFO  L902   garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true
[2022-11-02 20:54:45,267 INFO  L899   garLoopResultBuilder]: For program point L562(lines 562 577) no Hoare annotation was computed.
[2022-11-02 20:54:45,267 INFO  L895   garLoopResultBuilder]: At program point L554(line 554) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:54:45,268 INFO  L895   garLoopResultBuilder]: At program point L579(lines 532 581) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2022-11-02 20:54:45,268 INFO  L899   garLoopResultBuilder]: For program point L542(lines 542 548) no Hoare annotation was computed.
[2022-11-02 20:54:45,268 INFO  L899   garLoopResultBuilder]: For program point L542-1(lines 542 548) no Hoare annotation was computed.
[2022-11-02 20:54:45,268 INFO  L899   garLoopResultBuilder]: For program point L534(lines 534 538) no Hoare annotation was computed.
[2022-11-02 20:54:45,268 INFO  L895   garLoopResultBuilder]: At program point L947(lines 942 950) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)))
[2022-11-02 20:54:45,268 INFO  L895   garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)))
[2022-11-02 20:54:45,269 INFO  L895   garLoopResultBuilder]: At program point L782(line 782) the Hoare annotation is: false
[2022-11-02 20:54:45,269 INFO  L895   garLoopResultBuilder]: At program point L939(lines 935 941) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0)))
[2022-11-02 20:54:45,269 INFO  L899   garLoopResultBuilder]: For program point waterRiseEXIT(lines 815 826) no Hoare annotation was computed.
[2022-11-02 20:54:45,269 INFO  L895   garLoopResultBuilder]: At program point waterRiseENTRY(lines 815 826) the Hoare annotation is: (or (not (= ~pumpRunning~0 0)) (= |old(~waterLevel~0)| ~waterLevel~0))
[2022-11-02 20:54:45,269 INFO  L899   garLoopResultBuilder]: For program point L819-1(lines 815 826) no Hoare annotation was computed.
[2022-11-02 20:54:45,269 INFO  L899   garLoopResultBuilder]: For program point L638(lines 638 655) no Hoare annotation was computed.
[2022-11-02 20:54:45,275 INFO  L899   garLoopResultBuilder]: For program point L766(lines 766 770) no Hoare annotation was computed.
[2022-11-02 20:54:45,275 INFO  L899   garLoopResultBuilder]: For program point L766-2(lines 766 770) no Hoare annotation was computed.
[2022-11-02 20:54:45,276 INFO  L895   garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 634 658) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,277 INFO  L895   garLoopResultBuilder]: At program point L653(line 653) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,277 INFO  L899   garLoopResultBuilder]: For program point L653-1(lines 634 658) no Hoare annotation was computed.
[2022-11-02 20:54:45,277 INFO  L899   garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 634 658) no Hoare annotation was computed.
[2022-11-02 20:54:45,278 INFO  L895   garLoopResultBuilder]: At program point L885(lines 880 888) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,278 INFO  L895   garLoopResultBuilder]: At program point L648(line 648) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,278 INFO  L895   garLoopResultBuilder]: At program point L772(lines 757 775) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,278 INFO  L895   garLoopResultBuilder]: At program point L644(line 644) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0))
[2022-11-02 20:54:45,278 INFO  L899   garLoopResultBuilder]: For program point L642(lines 642 650) no Hoare annotation was computed.
[2022-11-02 20:54:45,281 INFO  L444         BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1]
[2022-11-02 20:54:45,283 INFO  L178   ceAbstractionStarter]: Computing trace abstraction results
[2022-11-02 20:54:45,328 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:54:45 BoogieIcfgContainer
[2022-11-02 20:54:45,328 INFO  L132        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2022-11-02 20:54:45,329 INFO  L113        PluginConnector]: ------------------------Witness Printer----------------------------
[2022-11-02 20:54:45,329 INFO  L271        PluginConnector]: Initializing Witness Printer...
[2022-11-02 20:54:45,329 INFO  L275        PluginConnector]: Witness Printer initialized
[2022-11-02 20:54:45,330 INFO  L185        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:42" (3/4) ...
[2022-11-02 20:54:45,333 INFO  L137         WitnessPrinter]: Generating witness for correct program
[2022-11-02 20:54:45,339 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump
[2022-11-02 20:54:45,339 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base
[2022-11-02 20:54:45,340 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel
[2022-11-02 20:54:45,340 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift
[2022-11-02 20:54:45,340 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup
[2022-11-02 20:54:45,340 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise
[2022-11-02 20:54:45,340 INFO  L354     RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor
[2022-11-02 20:54:45,348 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges
[2022-11-02 20:54:45,350 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges
[2022-11-02 20:54:45,350 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges
[2022-11-02 20:54:45,350 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges
[2022-11-02 20:54:45,351 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges
[2022-11-02 20:54:45,352 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2022-11-02 20:54:45,352 INFO  L910   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2022-11-02 20:54:45,380 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive)
[2022-11-02 20:54:45,381 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive)
[2022-11-02 20:54:45,381 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0
[2022-11-02 20:54:45,382 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0)
[2022-11-02 20:54:45,384 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))
[2022-11-02 20:54:45,385 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)
[2022-11-02 20:54:45,386 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1)
[2022-11-02 20:54:45,386 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0)
[2022-11-02 20:54:45,386 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0
[2022-11-02 20:54:45,386 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1))
[2022-11-02 20:54:45,387 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0)
[2022-11-02 20:54:45,387 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || 0 == systemActive
[2022-11-02 20:54:45,387 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1))
[2022-11-02 20:54:45,387 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0) || 0 == systemActive
[2022-11-02 20:54:45,388 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(\old(pumpRunning) == 0)
[2022-11-02 20:54:45,426 INFO  L141         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/witness.graphml
[2022-11-02 20:54:45,426 INFO  L132        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2022-11-02 20:54:45,427 INFO  L158              Benchmark]: Toolchain (without parser) took 4436.87ms. Allocated memory was 123.7MB in the beginning and 151.0MB in the end (delta: 27.3MB). Free memory was 87.3MB in the beginning and 69.4MB in the end (delta: 18.0MB). Peak memory consumption was 43.8MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,427 INFO  L158              Benchmark]: CDTParser took 0.35ms. Allocated memory is still 83.9MB. Free memory was 55.4MB in the beginning and 55.4MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB.
[2022-11-02 20:54:45,428 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 605.82ms. Allocated memory is still 123.7MB. Free memory was 87.1MB in the beginning and 91.4MB in the end (delta: -4.3MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,428 INFO  L158              Benchmark]: Boogie Procedure Inliner took 51.54ms. Allocated memory is still 123.7MB. Free memory was 91.4MB in the beginning and 89.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,428 INFO  L158              Benchmark]: Boogie Preprocessor took 31.78ms. Allocated memory is still 123.7MB. Free memory was 89.5MB in the beginning and 87.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,429 INFO  L158              Benchmark]: RCFGBuilder took 663.12ms. Allocated memory is still 123.7MB. Free memory was 87.4MB in the beginning and 69.1MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,429 INFO  L158              Benchmark]: TraceAbstraction took 2976.60ms. Allocated memory was 123.7MB in the beginning and 151.0MB in the end (delta: 27.3MB). Free memory was 68.5MB in the beginning and 75.7MB in the end (delta: -7.2MB). Peak memory consumption was 21.3MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,430 INFO  L158              Benchmark]: Witness Printer took 97.47ms. Allocated memory is still 151.0MB. Free memory was 75.7MB in the beginning and 69.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB.
[2022-11-02 20:54:45,432 INFO  L339   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.35ms. Allocated memory is still 83.9MB. Free memory was 55.4MB in the beginning and 55.4MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 605.82ms. Allocated memory is still 123.7MB. Free memory was 87.1MB in the beginning and 91.4MB in the end (delta: -4.3MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 51.54ms. Allocated memory is still 123.7MB. Free memory was 91.4MB in the beginning and 89.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 31.78ms. Allocated memory is still 123.7MB. Free memory was 89.5MB in the beginning and 87.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * RCFGBuilder took 663.12ms. Allocated memory is still 123.7MB. Free memory was 87.4MB in the beginning and 69.1MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
 * TraceAbstraction took 2976.60ms. Allocated memory was 123.7MB in the beginning and 151.0MB in the end (delta: 27.3MB). Free memory was 68.5MB in the beginning and 75.7MB in the end (delta: -7.2MB). Peak memory consumption was 21.3MB. Max. memory is 16.1GB.
 * Witness Printer took 97.47ms. Allocated memory is still 151.0MB. Free memory was 75.7MB in the beginning and 69.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - PositiveResult [Line: 956]: call to reach_error is unreachable
    For all program executions holds that call to reach_error is unreachable at this location
  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 8 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.9s, OverallIterations: 6, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 328 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 323 mSDsluCounter, 1116 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 624 mSDsCounter, 39 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 96 IncrementalHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 39 mSolverCounterUnsat, 492 mSDtfsCounter, 96 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 37 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=189occurred in iteration=4, InterpolantAutomatonStates: 25, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 6 MinimizatonAttempts, 5 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 359 PreInvPairs, 409 NumberOfFragments, 357 HoareAnnotationTreeSize, 359 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 42 FomulaSimplificationsInter, 1182 FormulaSimplificationTreeSizeReductionInter, 0.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 154 NumberOfCodeBlocks, 154 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 148 ConstructedInterpolants, 0 QuantifiedInterpolants, 312 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available
  - AllSpecificationsHoldResult: All specifications hold
    1 specifications checked. All of them hold
  - InvariantResult [Line: 757]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || 0 == systemActive
  - InvariantResult [Line: 880]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || 0 == systemActive
  - InvariantResult [Line: 791]: Loop Invariant
    Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)
  - InvariantResult [Line: 52]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 839]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0)
  - InvariantResult [Line: 952]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0)
  - InvariantResult [Line: 803]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0)
  - InvariantResult [Line: 130]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 522]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 532]: Loop Invariant
    Derived loop invariant: ((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0
  - InvariantResult [Line: 109]: Loop Invariant
    Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive)
  - InvariantResult [Line: 531]: Loop Invariant
    Derived loop invariant: 0
  - InvariantResult [Line: 891]: Loop Invariant
    Derived loop invariant: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1))
  - InvariantResult [Line: 660]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))
  - InvariantResult [Line: 62]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 117]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 928]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)
  - InvariantResult [Line: 701]: Loop Invariant
    Derived loop invariant: !(\old(pumpRunning) == 0)
  - InvariantResult [Line: 776]: Loop Invariant
    Derived loop invariant: ((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0
  - InvariantResult [Line: 871]: Loop Invariant
    Derived loop invariant: (!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1)
  - InvariantResult [Line: 712]: Loop Invariant
    Derived loop invariant: (!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1))
  - InvariantResult [Line: 935]: Loop Invariant
    Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)
  - InvariantResult [Line: 942]: Loop Invariant
    Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive)
RESULT: Ultimate proved your program to be correct!
[2022-11-02 20:54:45,517 INFO  L540       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a475cd33-c348-47f1-a2aa-f161011ee97c/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Result:
TRUE