./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version 9bd2c7ff
Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3364c65adf57fef4e6e40e7680894e092c8fbf29e459121c70f90a68103ac5cb
--- Real Ultimate output ---
This is Ultimate 0.2.3-dev-9bd2c7f
[2023-11-19 07:50:22,482 INFO  L188        SettingsManager]: Resetting all preferences to default values...
[2023-11-19 07:50:22,593 INFO  L114        SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf
[2023-11-19 07:50:22,604 WARN  L101        SettingsManager]: Preference file contains the following unknown settings:
[2023-11-19 07:50:22,605 WARN  L103        SettingsManager]:   * de.uni_freiburg.informatik.ultimate.core.Log level for class
[2023-11-19 07:50:22,637 INFO  L130        SettingsManager]: Preferences different from defaults after loading the file:
[2023-11-19 07:50:22,639 INFO  L151        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2023-11-19 07:50:22,640 INFO  L153        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2023-11-19 07:50:22,641 INFO  L151        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2023-11-19 07:50:22,646 INFO  L153        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2023-11-19 07:50:22,647 INFO  L151        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2023-11-19 07:50:22,648 INFO  L153        SettingsManager]:  * Create parallel compositions if possible=false
[2023-11-19 07:50:22,648 INFO  L153        SettingsManager]:  * Use SBE=true
[2023-11-19 07:50:22,650 INFO  L151        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2023-11-19 07:50:22,650 INFO  L153        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2023-11-19 07:50:22,651 INFO  L153        SettingsManager]:  * sizeof long=4
[2023-11-19 07:50:22,651 INFO  L153        SettingsManager]:  * Overapproximate operations on floating types=true
[2023-11-19 07:50:22,652 INFO  L153        SettingsManager]:  * sizeof POINTER=4
[2023-11-19 07:50:22,652 INFO  L153        SettingsManager]:  * Check division by zero=IGNORE
[2023-11-19 07:50:22,653 INFO  L153        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2023-11-19 07:50:22,653 INFO  L153        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2023-11-19 07:50:22,654 INFO  L153        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2023-11-19 07:50:22,654 INFO  L153        SettingsManager]:  * sizeof long double=12
[2023-11-19 07:50:22,654 INFO  L153        SettingsManager]:  * Check if freed pointer was valid=false
[2023-11-19 07:50:22,655 INFO  L153        SettingsManager]:  * Use constant arrays=true
[2023-11-19 07:50:22,656 INFO  L151        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2023-11-19 07:50:22,656 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2023-11-19 07:50:22,657 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2023-11-19 07:50:22,657 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2023-11-19 07:50:22,657 INFO  L151        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2023-11-19 07:50:22,659 INFO  L153        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2023-11-19 07:50:22,659 INFO  L153        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopHeads
[2023-11-19 07:50:22,659 INFO  L153        SettingsManager]:  * Trace refinement strategy=CAMEL
[2023-11-19 07:50:22,660 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2023-11-19 07:50:22,660 INFO  L153        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2023-11-19 07:50:22,660 INFO  L153        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2023-11-19 07:50:22,660 INFO  L153        SettingsManager]:  * Order on configurations for Petri net unfoldings=DBO
[2023-11-19 07:50:22,661 INFO  L153        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2023-11-19 07:50:22,661 INFO  L153        SettingsManager]:  * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC
[2023-11-19 07:50:22,661 INFO  L153        SettingsManager]:  * Looper check in Petri net analysis=SEMANTIC
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3364c65adf57fef4e6e40e7680894e092c8fbf29e459121c70f90a68103ac5cb
[2023-11-19 07:50:22,939 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2023-11-19 07:50:22,971 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2023-11-19 07:50:22,974 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2023-11-19 07:50:22,976 INFO  L270        PluginConnector]: Initializing CDTParser...
[2023-11-19 07:50:22,977 INFO  L274        PluginConnector]: CDTParser initialized
[2023-11-19 07:50:22,978 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c
[2023-11-19 07:50:26,128 INFO  L533              CDTParser]: Created temporary CDT project at NULL
[2023-11-19 07:50:26,446 INFO  L384              CDTParser]: Found 1 translation units.
[2023-11-19 07:50:26,447 INFO  L180              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c
[2023-11-19 07:50:26,464 INFO  L427              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/data/7caf75d07/9485bc8fc2e643b3af3aec5154276cc5/FLAG81fdae65b
[2023-11-19 07:50:26,494 INFO  L435              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/data/7caf75d07/9485bc8fc2e643b3af3aec5154276cc5
[2023-11-19 07:50:26,506 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2023-11-19 07:50:26,509 INFO  L133        ToolchainWalker]: Walking toolchain with 6 elements.
[2023-11-19 07:50:26,514 INFO  L112        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2023-11-19 07:50:26,515 INFO  L270        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2023-11-19 07:50:26,522 INFO  L274        PluginConnector]: CACSL2BoogieTranslator initialized
[2023-11-19 07:50:26,524 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:50:26" (1/1) ...
[2023-11-19 07:50:26,526 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3b6f49b0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:26, skipping insertion in model container
[2023-11-19 07:50:26,527 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:50:26" (1/1) ...
[2023-11-19 07:50:26,601 INFO  L177         MainTranslator]: Built tables and reachable declarations
[2023-11-19 07:50:26,852 WARN  L240   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c[11828,11841]
[2023-11-19 07:50:26,892 INFO  L209          PostProcessor]: Analyzing one entry point: main
[2023-11-19 07:50:26,904 INFO  L202         MainTranslator]: Completed pre-run
[2023-11-19 07:50:26,915 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49]
[2023-11-19 07:50:26,917 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87]
[2023-11-19 07:50:26,918 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [453]
[2023-11-19 07:50:26,918 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [462]
[2023-11-19 07:50:26,918 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [548]
[2023-11-19 07:50:26,919 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [649]
[2023-11-19 07:50:26,919 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828]
[2023-11-19 07:50:26,919 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [897]
[2023-11-19 07:50:26,962 WARN  L240   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/sv-benchmarks/c/product-lines/minepump_spec2_product16.cil.c[11828,11841]
[2023-11-19 07:50:26,982 INFO  L209          PostProcessor]: Analyzing one entry point: main
[2023-11-19 07:50:27,005 INFO  L206         MainTranslator]: Completed translation
[2023-11-19 07:50:27,005 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27 WrapperNode
[2023-11-19 07:50:27,005 INFO  L131        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2023-11-19 07:50:27,007 INFO  L112        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2023-11-19 07:50:27,007 INFO  L270        PluginConnector]: Initializing Boogie Procedure Inliner...
[2023-11-19 07:50:27,007 INFO  L274        PluginConnector]: Boogie Procedure Inliner initialized
[2023-11-19 07:50:27,016 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,032 INFO  L184        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,059 INFO  L138                Inliner]: procedures = 54, calls = 98, calls flagged for inlining = 20, calls inlined = 16, statements flattened = 153
[2023-11-19 07:50:27,059 INFO  L131        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2023-11-19 07:50:27,060 INFO  L112        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2023-11-19 07:50:27,060 INFO  L270        PluginConnector]: Initializing Boogie Preprocessor...
[2023-11-19 07:50:27,060 INFO  L274        PluginConnector]: Boogie Preprocessor initialized
[2023-11-19 07:50:27,071 INFO  L184        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,071 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,073 INFO  L184        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,074 INFO  L184        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,081 INFO  L184        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,086 INFO  L184        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,088 INFO  L184        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,090 INFO  L184        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,093 INFO  L131        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2023-11-19 07:50:27,094 INFO  L112        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2023-11-19 07:50:27,094 INFO  L270        PluginConnector]: Initializing RCFGBuilder...
[2023-11-19 07:50:27,095 INFO  L274        PluginConnector]: RCFGBuilder initialized
[2023-11-19 07:50:27,096 INFO  L184        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (1/1) ...
[2023-11-19 07:50:27,107 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2023-11-19 07:50:27,130 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/z3
[2023-11-19 07:50:27,150 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
[2023-11-19 07:50:27,176 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process
[2023-11-19 07:50:27,205 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2023-11-19 07:50:27,205 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2023-11-19 07:50:27,205 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2023-11-19 07:50:27,206 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2023-11-19 07:50:27,208 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2023-11-19 07:50:27,208 INFO  L130     BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical
[2023-11-19 07:50:27,209 INFO  L138     BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical
[2023-11-19 07:50:27,209 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2023-11-19 07:50:27,210 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2023-11-19 07:50:27,210 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery
[2023-11-19 07:50:27,210 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery
[2023-11-19 07:50:27,210 INFO  L130     BoogieDeclarations]: Found specification of procedure isMethaneAlarm
[2023-11-19 07:50:27,210 INFO  L138     BoogieDeclarations]: Found implementation of procedure isMethaneAlarm
[2023-11-19 07:50:27,211 INFO  L130     BoogieDeclarations]: Found specification of procedure deactivatePump
[2023-11-19 07:50:27,211 INFO  L138     BoogieDeclarations]: Found implementation of procedure deactivatePump
[2023-11-19 07:50:27,211 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int
[2023-11-19 07:50:27,212 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2023-11-19 07:50:27,212 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2023-11-19 07:50:27,212 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2023-11-19 07:50:27,213 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2023-11-19 07:50:27,352 INFO  L236             CfgBuilder]: Building ICFG
[2023-11-19 07:50:27,355 INFO  L262             CfgBuilder]: Building CFG for each procedure with an implementation
[2023-11-19 07:50:27,717 INFO  L277             CfgBuilder]: Performing block encoding
[2023-11-19 07:50:27,726 INFO  L297             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2023-11-19 07:50:27,726 INFO  L302             CfgBuilder]: Removed 2 assume(true) statements.
[2023-11-19 07:50:27,731 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:50:27 BoogieIcfgContainer
[2023-11-19 07:50:27,731 INFO  L131        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2023-11-19 07:50:27,734 INFO  L112        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2023-11-19 07:50:27,734 INFO  L270        PluginConnector]: Initializing TraceAbstraction...
[2023-11-19 07:50:27,738 INFO  L274        PluginConnector]: TraceAbstraction initialized
[2023-11-19 07:50:27,738 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:50:26" (1/3) ...
[2023-11-19 07:50:27,739 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@31b5f6ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:50:27, skipping insertion in model container
[2023-11-19 07:50:27,740 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:50:27" (2/3) ...
[2023-11-19 07:50:27,740 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@31b5f6ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:50:27, skipping insertion in model container
[2023-11-19 07:50:27,740 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:50:27" (3/3) ...
[2023-11-19 07:50:27,742 INFO  L112   eAbstractionObserver]: Analyzing ICFG minepump_spec2_product16.cil.c
[2023-11-19 07:50:27,782 INFO  L203   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2023-11-19 07:50:27,782 INFO  L162   ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations.
[2023-11-19 07:50:27,850 INFO  L356      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2023-11-19 07:50:27,857 INFO  L357      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@51495845, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=<UNSUPPORTED>, UseSemiCommutativity=<UNSUPPORTED>, Solver=<NOT_USED>, SolverTimeout=<NOT_USED>]
[2023-11-19 07:50:27,858 INFO  L358      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2023-11-19 07:50:27,863 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 86 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 70 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13)
[2023-11-19 07:50:27,874 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 26
[2023-11-19 07:50:27,874 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:50:27,875 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:50:27,876 INFO  L420      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:50:27,883 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:50:27,884 INFO  L85        PathProgramCache]: Analyzing trace with hash 265998247, now seen corresponding path program 1 times
[2023-11-19 07:50:27,894 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:50:27,895 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660905969]
[2023-11-19 07:50:27,895 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:50:27,895 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:50:28,034 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,158 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15
[2023-11-19 07:50:28,161 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,170 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:50:28,174 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:50:28,174 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660905969]
[2023-11-19 07:50:28,175 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660905969] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:50:28,176 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:50:28,176 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2023-11-19 07:50:28,178 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522430880]
[2023-11-19 07:50:28,179 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:50:28,187 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2023-11-19 07:50:28,187 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:50:28,224 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2023-11-19 07:50:28,225 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2023-11-19 07:50:28,227 INFO  L87              Difference]: Start difference. First operand  has 86 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 70 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,265 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:50:28,265 INFO  L93              Difference]: Finished difference Result 163 states and 218 transitions.
[2023-11-19 07:50:28,266 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2023-11-19 07:50:28,267 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25
[2023-11-19 07:50:28,268 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:50:28,277 INFO  L225             Difference]: With dead ends: 163
[2023-11-19 07:50:28,278 INFO  L226             Difference]: Without dead ends: 77
[2023-11-19 07:50:28,282 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2023-11-19 07:50:28,286 INFO  L413           NwaCegarLoop]: 106 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:50:28,287 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:50:28,305 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 77 states.
[2023-11-19 07:50:28,332 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77.
[2023-11-19 07:50:28,334 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 77 states, 56 states have (on average 1.2857142857142858) internal successors, (72), 62 states have internal predecessors, (72), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12)
[2023-11-19 07:50:28,337 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 97 transitions.
[2023-11-19 07:50:28,339 INFO  L78                 Accepts]: Start accepts. Automaton has 77 states and 97 transitions. Word has length 25
[2023-11-19 07:50:28,339 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:50:28,339 INFO  L495      AbstractCegarLoop]: Abstraction has 77 states and 97 transitions.
[2023-11-19 07:50:28,340 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,340 INFO  L276                IsEmpty]: Start isEmpty. Operand 77 states and 97 transitions.
[2023-11-19 07:50:28,343 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 27
[2023-11-19 07:50:28,343 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:50:28,343 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:50:28,343 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2023-11-19 07:50:28,344 INFO  L420      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:50:28,345 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:50:28,345 INFO  L85        PathProgramCache]: Analyzing trace with hash -1379017056, now seen corresponding path program 1 times
[2023-11-19 07:50:28,345 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:50:28,346 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286259303]
[2023-11-19 07:50:28,346 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:50:28,346 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:50:28,372 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,478 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16
[2023-11-19 07:50:28,481 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,485 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:50:28,485 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:50:28,485 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286259303]
[2023-11-19 07:50:28,486 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286259303] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:50:28,486 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:50:28,486 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2023-11-19 07:50:28,487 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385211578]
[2023-11-19 07:50:28,487 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:50:28,488 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2023-11-19 07:50:28,489 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:50:28,489 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2023-11-19 07:50:28,490 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:50:28,490 INFO  L87              Difference]: Start difference. First operand 77 states and 97 transitions. Second operand  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,521 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:50:28,521 INFO  L93              Difference]: Finished difference Result 114 states and 142 transitions.
[2023-11-19 07:50:28,522 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2023-11-19 07:50:28,522 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26
[2023-11-19 07:50:28,523 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:50:28,524 INFO  L225             Difference]: With dead ends: 114
[2023-11-19 07:50:28,524 INFO  L226             Difference]: Without dead ends: 68
[2023-11-19 07:50:28,526 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:50:28,527 INFO  L413           NwaCegarLoop]: 84 mSDtfsCounter, 17 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:50:28,528 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 146 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:50:28,529 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 68 states.
[2023-11-19 07:50:28,540 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68.
[2023-11-19 07:50:28,540 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 68 states, 50 states have (on average 1.3) internal successors, (65), 56 states have internal predecessors, (65), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10)
[2023-11-19 07:50:28,543 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 85 transitions.
[2023-11-19 07:50:28,543 INFO  L78                 Accepts]: Start accepts. Automaton has 68 states and 85 transitions. Word has length 26
[2023-11-19 07:50:28,543 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:50:28,544 INFO  L495      AbstractCegarLoop]: Abstraction has 68 states and 85 transitions.
[2023-11-19 07:50:28,544 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,544 INFO  L276                IsEmpty]: Start isEmpty. Operand 68 states and 85 transitions.
[2023-11-19 07:50:28,546 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2023-11-19 07:50:28,546 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:50:28,547 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:50:28,547 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2023-11-19 07:50:28,547 INFO  L420      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:50:28,548 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:50:28,548 INFO  L85        PathProgramCache]: Analyzing trace with hash -969984948, now seen corresponding path program 1 times
[2023-11-19 07:50:28,548 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:50:28,549 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168790731]
[2023-11-19 07:50:28,549 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:50:28,549 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:50:28,581 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,702 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21
[2023-11-19 07:50:28,707 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:28,714 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:50:28,714 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:50:28,714 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168790731]
[2023-11-19 07:50:28,715 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168790731] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:50:28,715 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:50:28,715 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2023-11-19 07:50:28,715 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [267322961]
[2023-11-19 07:50:28,715 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:50:28,716 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2023-11-19 07:50:28,716 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:50:28,717 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2023-11-19 07:50:28,717 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:50:28,718 INFO  L87              Difference]: Start difference. First operand 68 states and 85 transitions. Second operand  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,792 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:50:28,793 INFO  L93              Difference]: Finished difference Result 186 states and 238 transitions.
[2023-11-19 07:50:28,798 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2023-11-19 07:50:28,798 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31
[2023-11-19 07:50:28,799 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:50:28,802 INFO  L225             Difference]: With dead ends: 186
[2023-11-19 07:50:28,802 INFO  L226             Difference]: Without dead ends: 126
[2023-11-19 07:50:28,803 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:50:28,805 INFO  L413           NwaCegarLoop]: 99 mSDtfsCounter, 62 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:50:28,806 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 171 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:50:28,807 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 126 states.
[2023-11-19 07:50:28,849 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123.
[2023-11-19 07:50:28,850 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 123 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 99 states have internal predecessors, (117), 20 states have call successors, (20), 14 states have call predecessors, (20), 14 states have return successors, (20), 15 states have call predecessors, (20), 20 states have call successors, (20)
[2023-11-19 07:50:28,853 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 157 transitions.
[2023-11-19 07:50:28,854 INFO  L78                 Accepts]: Start accepts. Automaton has 123 states and 157 transitions. Word has length 31
[2023-11-19 07:50:28,854 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:50:28,854 INFO  L495      AbstractCegarLoop]: Abstraction has 123 states and 157 transitions.
[2023-11-19 07:50:28,854 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:28,855 INFO  L276                IsEmpty]: Start isEmpty. Operand 123 states and 157 transitions.
[2023-11-19 07:50:28,857 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 35
[2023-11-19 07:50:28,857 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:50:28,857 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:50:28,857 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2023-11-19 07:50:28,858 INFO  L420      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:50:28,858 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:50:28,859 INFO  L85        PathProgramCache]: Analyzing trace with hash -1792730875, now seen corresponding path program 1 times
[2023-11-19 07:50:28,859 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:50:28,859 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [110502541]
[2023-11-19 07:50:28,859 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:50:28,860 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:50:28,898 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:29,007 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24
[2023-11-19 07:50:29,009 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:50:29,013 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:50:29,013 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:50:29,014 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [110502541]
[2023-11-19 07:50:29,014 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [110502541] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:50:29,014 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:50:29,014 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2023-11-19 07:50:29,014 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [478292596]
[2023-11-19 07:50:29,015 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:50:29,015 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2023-11-19 07:50:29,015 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:50:29,016 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2023-11-19 07:50:29,016 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2023-11-19 07:50:29,016 INFO  L87              Difference]: Start difference. First operand 123 states and 157 transitions. Second operand  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:29,083 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:50:29,084 INFO  L93              Difference]: Finished difference Result 208 states and 267 transitions.
[2023-11-19 07:50:29,084 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2023-11-19 07:50:29,084 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34
[2023-11-19 07:50:29,085 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:50:29,085 INFO  L225             Difference]: With dead ends: 208
[2023-11-19 07:50:29,085 INFO  L226             Difference]: Without dead ends: 0
[2023-11-19 07:50:29,087 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42
[2023-11-19 07:50:29,089 INFO  L413           NwaCegarLoop]: 54 mSDtfsCounter, 56 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:50:29,090 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 157 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:50:29,091 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 0 states.
[2023-11-19 07:50:29,091 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0.
[2023-11-19 07:50:29,091 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2023-11-19 07:50:29,091 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions.
[2023-11-19 07:50:29,091 INFO  L78                 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34
[2023-11-19 07:50:29,092 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:50:29,092 INFO  L495      AbstractCegarLoop]: Abstraction has 0 states and 0 transitions.
[2023-11-19 07:50:29,092 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:50:29,092 INFO  L276                IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions.
[2023-11-19 07:50:29,092 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2023-11-19 07:50:29,095 INFO  L805   garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2023-11-19 07:50:29,096 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2023-11-19 07:50:29,098 INFO  L343    DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions.
[2023-11-19 07:50:29,279 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 741 748) no Hoare annotation was computed.
[2023-11-19 07:50:29,280 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 741 748) the Hoare annotation is: true
[2023-11-19 07:50:29,280 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 741 748) no Hoare annotation was computed.
[2023-11-19 07:50:29,280 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 495 506) the Hoare annotation is: true
[2023-11-19 07:50:29,280 INFO  L899   garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 495 506) no Hoare annotation was computed.
[2023-11-19 07:50:29,281 INFO  L899   garLoopResultBuilder]: For program point L499-1(lines 495 506) no Hoare annotation was computed.
[2023-11-19 07:50:29,281 INFO  L899   garLoopResultBuilder]: For program point L919(lines 919 929) no Hoare annotation was computed.
[2023-11-19 07:50:29,281 INFO  L899   garLoopResultBuilder]: For program point L663-1(lines 662 681) no Hoare annotation was computed.
[2023-11-19 07:50:29,281 INFO  L899   garLoopResultBuilder]: For program point L915(lines 915 932) no Hoare annotation was computed.
[2023-11-19 07:50:29,281 INFO  L899   garLoopResultBuilder]: For program point L915-1(lines 907 935) no Hoare annotation was computed.
[2023-11-19 07:50:29,282 INFO  L899   garLoopResultBuilder]: For program point timeShiftFINAL(lines 659 682) no Hoare annotation was computed.
[2023-11-19 07:50:29,283 INFO  L895   garLoopResultBuilder]: At program point L705(line 705) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2023-11-19 07:50:29,283 INFO  L895   garLoopResultBuilder]: At program point L701(line 701) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2023-11-19 07:50:29,283 INFO  L895   garLoopResultBuilder]: At program point L697(line 697) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2023-11-19 07:50:29,284 INFO  L899   garLoopResultBuilder]: For program point L697-1(line 697) no Hoare annotation was computed.
[2023-11-19 07:50:29,286 INFO  L899   garLoopResultBuilder]: For program point L920(lines 920 926) no Hoare annotation was computed.
[2023-11-19 07:50:29,287 INFO  L899   garLoopResultBuilder]: For program point L458(line 458) no Hoare annotation was computed.
[2023-11-19 07:50:29,287 INFO  L895   garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0))
[2023-11-19 07:50:29,287 INFO  L899   garLoopResultBuilder]: For program point L710-1(lines 691 715) no Hoare annotation was computed.
[2023-11-19 07:50:29,287 INFO  L899   garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed.
[2023-11-19 07:50:29,288 INFO  L899   garLoopResultBuilder]: For program point L475-2(lines 471 482) no Hoare annotation was computed.
[2023-11-19 07:50:29,288 INFO  L895   garLoopResultBuilder]: At program point L913(line 913) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0))
[2023-11-19 07:50:29,288 INFO  L899   garLoopResultBuilder]: For program point L913-1(line 913) no Hoare annotation was computed.
[2023-11-19 07:50:29,288 INFO  L899   garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 454 461) no Hoare annotation was computed.
[2023-11-19 07:50:29,289 INFO  L895   garLoopResultBuilder]: At program point $Ultimate##0(lines 659 682) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0))
[2023-11-19 07:50:29,289 INFO  L899   garLoopResultBuilder]: For program point L670-1(lines 670 676) no Hoare annotation was computed.
[2023-11-19 07:50:29,289 INFO  L899   garLoopResultBuilder]: For program point L699(lines 699 707) no Hoare annotation was computed.
[2023-11-19 07:50:29,290 INFO  L899   garLoopResultBuilder]: For program point L695(lines 695 712) no Hoare annotation was computed.
[2023-11-19 07:50:29,290 INFO  L899   garLoopResultBuilder]: For program point timeShiftEXIT(lines 659 682) no Hoare annotation was computed.
[2023-11-19 07:50:29,290 INFO  L899   garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 760 768) no Hoare annotation was computed.
[2023-11-19 07:50:29,290 INFO  L899   garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 458) no Hoare annotation was computed.
[2023-11-19 07:50:29,291 INFO  L899   garLoopResultBuilder]: For program point L576(lines 551 580) no Hoare annotation was computed.
[2023-11-19 07:50:29,291 INFO  L899   garLoopResultBuilder]: For program point cleanupEXIT(lines 551 580) no Hoare annotation was computed.
[2023-11-19 07:50:29,291 INFO  L899   garLoopResultBuilder]: For program point L572(line 572) no Hoare annotation was computed.
[2023-11-19 07:50:29,292 INFO  L899   garLoopResultBuilder]: For program point L565(lines 565 569) no Hoare annotation was computed.
[2023-11-19 07:50:29,293 INFO  L902   garLoopResultBuilder]: At program point L565-1(lines 565 569) the Hoare annotation is: true
[2023-11-19 07:50:29,293 INFO  L899   garLoopResultBuilder]: For program point L562(line 562) no Hoare annotation was computed.
[2023-11-19 07:50:29,293 INFO  L902   garLoopResultBuilder]: At program point L561-2(lines 561 575) the Hoare annotation is: true
[2023-11-19 07:50:29,293 INFO  L902   garLoopResultBuilder]: At program point L557(line 557) the Hoare annotation is: true
[2023-11-19 07:50:29,293 INFO  L899   garLoopResultBuilder]: For program point L557-1(line 557) no Hoare annotation was computed.
[2023-11-19 07:50:29,295 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 551 580) the Hoare annotation is: true
[2023-11-19 07:50:29,300 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 507 515) the Hoare annotation is: true
[2023-11-19 07:50:29,301 INFO  L899   garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 507 515) no Hoare annotation was computed.
[2023-11-19 07:50:29,302 INFO  L899   garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 507 515) no Hoare annotation was computed.
[2023-11-19 07:50:29,305 INFO  L895   garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2023-11-19 07:50:29,306 INFO  L899   garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 820 827) no Hoare annotation was computed.
[2023-11-19 07:50:29,306 INFO  L895   garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2023-11-19 07:50:29,306 INFO  L899   garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed.
[2023-11-19 07:50:29,307 INFO  L899   garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed.
[2023-11-19 07:50:29,308 INFO  L899   garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 615 625) no Hoare annotation was computed.
[2023-11-19 07:50:29,309 INFO  L899   garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 64 70) no Hoare annotation was computed.
[2023-11-19 07:50:29,309 INFO  L899   garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed.
[2023-11-19 07:50:29,309 INFO  L899   garLoopResultBuilder]: For program point main_returnLabel#1(lines 626 648) no Hoare annotation was computed.
[2023-11-19 07:50:29,315 INFO  L899   garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed.
[2023-11-19 07:50:29,315 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed.
[2023-11-19 07:50:29,315 INFO  L899   garLoopResultBuilder]: For program point setup_returnLabel#1(lines 606 612) no Hoare annotation was computed.
[2023-11-19 07:50:29,315 INFO  L899   garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed.
[2023-11-19 07:50:29,316 INFO  L899   garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed.
[2023-11-19 07:50:29,316 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed.
[2023-11-19 07:50:29,316 INFO  L899   garLoopResultBuilder]: For program point L636(lines 636 643) no Hoare annotation was computed.
[2023-11-19 07:50:29,316 INFO  L899   garLoopResultBuilder]: For program point L892(lines 829 896) no Hoare annotation was computed.
[2023-11-19 07:50:29,316 INFO  L899   garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed.
[2023-11-19 07:50:29,317 INFO  L899   garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed.
[2023-11-19 07:50:29,317 INFO  L899   garLoopResultBuilder]: For program point L636-2(lines 636 643) no Hoare annotation was computed.
[2023-11-19 07:50:29,317 INFO  L895   garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2023-11-19 07:50:29,320 INFO  L899   garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed.
[2023-11-19 07:50:29,320 INFO  L899   garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 71 77) no Hoare annotation was computed.
[2023-11-19 07:50:29,320 INFO  L899   garLoopResultBuilder]: For program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 899 906) no Hoare annotation was computed.
[2023-11-19 07:50:29,321 INFO  L895   garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false
[2023-11-19 07:50:29,321 INFO  L899   garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 805 819) no Hoare annotation was computed.
[2023-11-19 07:50:29,321 INFO  L899   garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed.
[2023-11-19 07:50:29,321 INFO  L899   garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 78 86) no Hoare annotation was computed.
[2023-11-19 07:50:29,321 INFO  L895   garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: false
[2023-11-19 07:50:29,322 INFO  L895   garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))
[2023-11-19 07:50:29,322 INFO  L899   garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed.
[2023-11-19 07:50:29,322 INFO  L899   garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed.
[2023-11-19 07:50:29,322 INFO  L899   garLoopResultBuilder]: For program point waterRiseEXIT(lines 483 494) no Hoare annotation was computed.
[2023-11-19 07:50:29,322 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 483 494) the Hoare annotation is: true
[2023-11-19 07:50:29,322 INFO  L899   garLoopResultBuilder]: For program point L487-1(lines 483 494) no Hoare annotation was computed.
[2023-11-19 07:50:29,323 INFO  L899   garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 683 689) no Hoare annotation was computed.
[2023-11-19 07:50:29,323 INFO  L902   garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryFINAL(lines 683 689) the Hoare annotation is: true
[2023-11-19 07:50:29,324 INFO  L899   garLoopResultBuilder]: For program point L754-1(line 754) no Hoare annotation was computed.
[2023-11-19 07:50:29,324 INFO  L899   garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 749 759) no Hoare annotation was computed.
[2023-11-19 07:50:29,324 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 749 759) the Hoare annotation is: true
[2023-11-19 07:50:29,324 INFO  L899   garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 749 759) no Hoare annotation was computed.
[2023-11-19 07:50:29,324 INFO  L902   garLoopResultBuilder]: At program point L754(line 754) the Hoare annotation is: true
[2023-11-19 07:50:29,327 INFO  L445         BasicCegarLoop]: Path program histogram: [1, 1, 1, 1]
[2023-11-19 07:50:29,329 INFO  L178   ceAbstractionStarter]: Computing trace abstraction results
[2023-11-19 07:50:29,354 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:50:29 BoogieIcfgContainer
[2023-11-19 07:50:29,354 INFO  L131        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2023-11-19 07:50:29,355 INFO  L112        PluginConnector]: ------------------------Witness Printer----------------------------
[2023-11-19 07:50:29,355 INFO  L270        PluginConnector]: Initializing Witness Printer...
[2023-11-19 07:50:29,356 INFO  L274        PluginConnector]: Witness Printer initialized
[2023-11-19 07:50:29,356 INFO  L184        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:50:27" (3/4) ...
[2023-11-19 07:50:29,360 INFO  L137         WitnessPrinter]: Generating witness for correct program
[2023-11-19 07:50:29,366 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump
[2023-11-19 07:50:29,366 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel
[2023-11-19 07:50:29,366 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift
[2023-11-19 07:50:29,366 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup
[2023-11-19 07:50:29,367 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical
[2023-11-19 07:50:29,367 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise
[2023-11-19 07:50:29,367 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery
[2023-11-19 07:50:29,367 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm
[2023-11-19 07:50:29,379 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges
[2023-11-19 07:50:29,380 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges
[2023-11-19 07:50:29,380 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges
[2023-11-19 07:50:29,381 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2023-11-19 07:50:29,381 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2023-11-19 07:50:29,523 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml
[2023-11-19 07:50:29,523 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/witness.yml
[2023-11-19 07:50:29,524 INFO  L131        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2023-11-19 07:50:29,524 INFO  L158              Benchmark]: Toolchain (without parser) took 3015.50ms. Allocated memory was 142.6MB in the beginning and 182.5MB in the end (delta: 39.8MB). Free memory was 96.9MB in the beginning and 139.8MB in the end (delta: -42.9MB). There was no memory consumed. Max. memory is 16.1GB.
[2023-11-19 07:50:29,525 INFO  L158              Benchmark]: CDTParser took 0.25ms. Allocated memory is still 100.7MB. Free memory was 47.0MB in the beginning and 46.8MB in the end (delta: 134.3kB). There was no memory consumed. Max. memory is 16.1GB.
[2023-11-19 07:50:29,525 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 491.86ms. Allocated memory is still 142.6MB. Free memory was 96.6MB in the beginning and 77.7MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
[2023-11-19 07:50:29,526 INFO  L158              Benchmark]: Boogie Procedure Inliner took 52.66ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 75.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2023-11-19 07:50:29,526 INFO  L158              Benchmark]: Boogie Preprocessor took 33.46ms. Allocated memory is still 142.6MB. Free memory was 75.6MB in the beginning and 74.2MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB.
[2023-11-19 07:50:29,527 INFO  L158              Benchmark]: RCFGBuilder took 637.24ms. Allocated memory is still 142.6MB. Free memory was 74.2MB in the beginning and 58.8MB in the end (delta: 15.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2023-11-19 07:50:29,527 INFO  L158              Benchmark]: TraceAbstraction took 1620.47ms. Allocated memory was 142.6MB in the beginning and 182.5MB in the end (delta: 39.8MB). Free memory was 58.1MB in the beginning and 147.2MB in the end (delta: -89.1MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB.
[2023-11-19 07:50:29,530 INFO  L158              Benchmark]: Witness Printer took 168.59ms. Allocated memory is still 182.5MB. Free memory was 147.2MB in the beginning and 139.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
[2023-11-19 07:50:29,533 INFO  L338   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.25ms. Allocated memory is still 100.7MB. Free memory was 47.0MB in the beginning and 46.8MB in the end (delta: 134.3kB). There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 491.86ms. Allocated memory is still 142.6MB. Free memory was 96.6MB in the beginning and 77.7MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 52.66ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 75.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 33.46ms. Allocated memory is still 142.6MB. Free memory was 75.6MB in the beginning and 74.2MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB.
 * RCFGBuilder took 637.24ms. Allocated memory is still 142.6MB. Free memory was 74.2MB in the beginning and 58.8MB in the end (delta: 15.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 1620.47ms. Allocated memory was 142.6MB in the beginning and 182.5MB in the end (delta: 39.8MB). Free memory was 58.1MB in the beginning and 147.2MB in the end (delta: -89.1MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB.
 * Witness Printer took 168.59ms. Allocated memory is still 182.5MB. Free memory was 147.2MB in the beginning and 139.8MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator:
  - GenericResultAtLocation [Line: 49]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49]
  - GenericResultAtLocation [Line: 87]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87]
  - GenericResultAtLocation [Line: 453]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [453]
  - GenericResultAtLocation [Line: 462]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [462]
  - GenericResultAtLocation [Line: 548]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [548]
  - GenericResultAtLocation [Line: 649]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [649]
  - GenericResultAtLocation [Line: 828]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828]
  - GenericResultAtLocation [Line: 897]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [897]
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - PositiveResult [Line: 458]: a call to reach_error is unreachable
    For all program executions holds that a call to reach_error is unreachable at this location
  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 9 procedures, 86 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.5s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 139 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 135 mSDsluCounter, 580 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 237 mSDsCounter, 6 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 21 IncrementalHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 6 mSolverCounterUnsat, 343 mSDtfsCounter, 21 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=123occurred in iteration=3, InterpolantAutomatonStates: 13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 23 LocationsWithAnnotation, 129 PreInvPairs, 141 NumberOfFragments, 77 HoareAnnotationTreeSize, 129 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 23 FomulaSimplificationsInter, 185 FormulaSimplificationTreeSizeReductionInter, 0.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 116 NumberOfCodeBlocks, 116 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 112 ConstructedInterpolants, 0 QuantifiedInterpolants, 168 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available
  - AllSpecificationsHoldResult: All specifications hold
    1 specifications checked. All of them hold
  - InvariantResult [Line: 838]: Loop Invariant
    Derived loop invariant: 0
  - InvariantResult [Line: 561]: Loop Invariant
    Derived loop invariant: 1
  - InvariantResult [Line: 839]: Loop Invariant
    Derived loop invariant: ((pumpRunning == 0) && (splverifierCounter == 0))
RESULT: Ultimate proved your program to be correct!
[2023-11-19 07:50:29,580 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a5b5ff6-8a9d-442a-8650-934c373a4773/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Result:
TRUE