./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version 9bd2c7ff
Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8c57aad23cdcf8081ba5352d473aea77ba42b47e93421a900d6921ce930c9593
--- Real Ultimate output ---
This is Ultimate 0.2.3-dev-9bd2c7f
[2023-11-19 07:58:24,496 INFO  L188        SettingsManager]: Resetting all preferences to default values...
[2023-11-19 07:58:24,616 INFO  L114        SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/config/svcomp-Reach-32bit-Automizer_Default.epf
[2023-11-19 07:58:24,624 WARN  L101        SettingsManager]: Preference file contains the following unknown settings:
[2023-11-19 07:58:24,626 WARN  L103        SettingsManager]:   * de.uni_freiburg.informatik.ultimate.core.Log level for class
[2023-11-19 07:58:24,666 INFO  L130        SettingsManager]: Preferences different from defaults after loading the file:
[2023-11-19 07:58:24,667 INFO  L151        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2023-11-19 07:58:24,667 INFO  L153        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2023-11-19 07:58:24,669 INFO  L151        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2023-11-19 07:58:24,673 INFO  L153        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2023-11-19 07:58:24,674 INFO  L151        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2023-11-19 07:58:24,675 INFO  L153        SettingsManager]:  * Create parallel compositions if possible=false
[2023-11-19 07:58:24,675 INFO  L153        SettingsManager]:  * Use SBE=true
[2023-11-19 07:58:24,677 INFO  L151        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2023-11-19 07:58:24,677 INFO  L153        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2023-11-19 07:58:24,678 INFO  L153        SettingsManager]:  * sizeof long=4
[2023-11-19 07:58:24,678 INFO  L153        SettingsManager]:  * Overapproximate operations on floating types=true
[2023-11-19 07:58:24,679 INFO  L153        SettingsManager]:  * sizeof POINTER=4
[2023-11-19 07:58:24,679 INFO  L153        SettingsManager]:  * Check division by zero=IGNORE
[2023-11-19 07:58:24,680 INFO  L153        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2023-11-19 07:58:24,680 INFO  L153        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2023-11-19 07:58:24,681 INFO  L153        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2023-11-19 07:58:24,681 INFO  L153        SettingsManager]:  * sizeof long double=12
[2023-11-19 07:58:24,683 INFO  L153        SettingsManager]:  * Check if freed pointer was valid=false
[2023-11-19 07:58:24,683 INFO  L153        SettingsManager]:  * Use constant arrays=true
[2023-11-19 07:58:24,684 INFO  L151        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2023-11-19 07:58:24,684 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2023-11-19 07:58:24,685 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2023-11-19 07:58:24,685 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2023-11-19 07:58:24,686 INFO  L151        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2023-11-19 07:58:24,687 INFO  L153        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2023-11-19 07:58:24,687 INFO  L153        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopHeads
[2023-11-19 07:58:24,688 INFO  L153        SettingsManager]:  * Trace refinement strategy=CAMEL
[2023-11-19 07:58:24,688 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2023-11-19 07:58:24,688 INFO  L153        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2023-11-19 07:58:24,688 INFO  L153        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2023-11-19 07:58:24,689 INFO  L153        SettingsManager]:  * Order on configurations for Petri net unfoldings=DBO
[2023-11-19 07:58:24,689 INFO  L153        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2023-11-19 07:58:24,689 INFO  L153        SettingsManager]:  * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC
[2023-11-19 07:58:24,689 INFO  L153        SettingsManager]:  * Looper check in Petri net analysis=SEMANTIC
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8c57aad23cdcf8081ba5352d473aea77ba42b47e93421a900d6921ce930c9593
[2023-11-19 07:58:25,021 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2023-11-19 07:58:25,056 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2023-11-19 07:58:25,059 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2023-11-19 07:58:25,061 INFO  L270        PluginConnector]: Initializing CDTParser...
[2023-11-19 07:58:25,061 INFO  L274        PluginConnector]: CDTParser initialized
[2023-11-19 07:58:25,062 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/../../sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c
[2023-11-19 07:58:28,200 INFO  L533              CDTParser]: Created temporary CDT project at NULL
[2023-11-19 07:58:28,524 INFO  L384              CDTParser]: Found 1 translation units.
[2023-11-19 07:58:28,525 INFO  L180              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c
[2023-11-19 07:58:28,540 INFO  L427              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/data/bc26b58b3/7ae3062e09804473887953b28cd25338/FLAGda8e58da0
[2023-11-19 07:58:28,554 INFO  L435              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/data/bc26b58b3/7ae3062e09804473887953b28cd25338
[2023-11-19 07:58:28,560 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2023-11-19 07:58:28,562 INFO  L133        ToolchainWalker]: Walking toolchain with 6 elements.
[2023-11-19 07:58:28,565 INFO  L112        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2023-11-19 07:58:28,565 INFO  L270        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2023-11-19 07:58:28,570 INFO  L274        PluginConnector]: CACSL2BoogieTranslator initialized
[2023-11-19 07:58:28,571 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:58:28" (1/1) ...
[2023-11-19 07:58:28,572 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16e90bc2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:28, skipping insertion in model container
[2023-11-19 07:58:28,572 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 07:58:28" (1/1) ...
[2023-11-19 07:58:28,644 INFO  L177         MainTranslator]: Built tables and reachable declarations
[2023-11-19 07:58:28,912 WARN  L240   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c[15113,15126]
[2023-11-19 07:58:28,944 INFO  L209          PostProcessor]: Analyzing one entry point: main
[2023-11-19 07:58:28,957 INFO  L202         MainTranslator]: Completed pre-run
[2023-11-19 07:58:28,970 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49]
[2023-11-19 07:58:28,971 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [91]
[2023-11-19 07:58:28,972 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [129]
[2023-11-19 07:58:28,972 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [224]
[2023-11-19 07:58:28,972 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [324]
[2023-11-19 07:58:28,973 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [690]
[2023-11-19 07:58:28,973 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [699]
[2023-11-19 07:58:28,973 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [770]
[2023-11-19 07:58:29,070 WARN  L240   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/sv-benchmarks/c/product-lines/minepump_spec2_product20.cil.c[15113,15126]
[2023-11-19 07:58:29,080 INFO  L209          PostProcessor]: Analyzing one entry point: main
[2023-11-19 07:58:29,103 INFO  L206         MainTranslator]: Completed translation
[2023-11-19 07:58:29,103 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29 WrapperNode
[2023-11-19 07:58:29,104 INFO  L131        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2023-11-19 07:58:29,105 INFO  L112        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2023-11-19 07:58:29,105 INFO  L270        PluginConnector]: Initializing Boogie Procedure Inliner...
[2023-11-19 07:58:29,105 INFO  L274        PluginConnector]: Boogie Procedure Inliner initialized
[2023-11-19 07:58:29,113 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,138 INFO  L184        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,171 INFO  L138                Inliner]: procedures = 55, calls = 97, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 174
[2023-11-19 07:58:29,172 INFO  L131        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2023-11-19 07:58:29,173 INFO  L112        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2023-11-19 07:58:29,173 INFO  L270        PluginConnector]: Initializing Boogie Preprocessor...
[2023-11-19 07:58:29,173 INFO  L274        PluginConnector]: Boogie Preprocessor initialized
[2023-11-19 07:58:29,188 INFO  L184        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,188 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,191 INFO  L184        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,191 INFO  L184        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,217 INFO  L184        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,221 INFO  L184        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,222 INFO  L184        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,224 INFO  L184        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,227 INFO  L131        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2023-11-19 07:58:29,227 INFO  L112        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2023-11-19 07:58:29,227 INFO  L270        PluginConnector]: Initializing RCFGBuilder...
[2023-11-19 07:58:29,228 INFO  L274        PluginConnector]: RCFGBuilder initialized
[2023-11-19 07:58:29,228 INFO  L184        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (1/1) ...
[2023-11-19 07:58:29,235 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2023-11-19 07:58:29,250 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/z3
[2023-11-19 07:58:29,265 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
[2023-11-19 07:58:29,302 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process
[2023-11-19 07:58:29,311 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2023-11-19 07:58:29,312 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base
[2023-11-19 07:58:29,312 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base
[2023-11-19 07:58:29,312 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2023-11-19 07:58:29,314 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2023-11-19 07:58:29,314 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2023-11-19 07:58:29,314 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2023-11-19 07:58:29,315 INFO  L130     BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical
[2023-11-19 07:58:29,315 INFO  L138     BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical
[2023-11-19 07:58:29,315 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2023-11-19 07:58:29,315 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2023-11-19 07:58:29,315 INFO  L130     BoogieDeclarations]: Found specification of procedure deactivatePump
[2023-11-19 07:58:29,315 INFO  L138     BoogieDeclarations]: Found implementation of procedure deactivatePump
[2023-11-19 07:58:29,315 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int
[2023-11-19 07:58:29,315 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2023-11-19 07:58:29,316 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2023-11-19 07:58:29,316 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2023-11-19 07:58:29,316 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2023-11-19 07:58:29,398 INFO  L236             CfgBuilder]: Building ICFG
[2023-11-19 07:58:29,399 INFO  L262             CfgBuilder]: Building CFG for each procedure with an implementation
[2023-11-19 07:58:29,686 INFO  L277             CfgBuilder]: Performing block encoding
[2023-11-19 07:58:29,695 INFO  L297             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2023-11-19 07:58:29,696 INFO  L302             CfgBuilder]: Removed 2 assume(true) statements.
[2023-11-19 07:58:29,700 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:58:29 BoogieIcfgContainer
[2023-11-19 07:58:29,700 INFO  L131        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2023-11-19 07:58:29,703 INFO  L112        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2023-11-19 07:58:29,703 INFO  L270        PluginConnector]: Initializing TraceAbstraction...
[2023-11-19 07:58:29,706 INFO  L274        PluginConnector]: TraceAbstraction initialized
[2023-11-19 07:58:29,707 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 07:58:28" (1/3) ...
[2023-11-19 07:58:29,708 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@b2aa7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:58:29, skipping insertion in model container
[2023-11-19 07:58:29,708 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 07:58:29" (2/3) ...
[2023-11-19 07:58:29,708 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@b2aa7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 07:58:29, skipping insertion in model container
[2023-11-19 07:58:29,708 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:58:29" (3/3) ...
[2023-11-19 07:58:29,710 INFO  L112   eAbstractionObserver]: Analyzing ICFG minepump_spec2_product20.cil.c
[2023-11-19 07:58:29,731 INFO  L203   ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2023-11-19 07:58:29,731 INFO  L162   ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations.
[2023-11-19 07:58:29,790 INFO  L356      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2023-11-19 07:58:29,797 INFO  L357      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@599ce1fd, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=<UNSUPPORTED>, UseSemiCommutativity=<UNSUPPORTED>, Solver=<NOT_USED>, SolverTimeout=<NOT_USED>]
[2023-11-19 07:58:29,798 INFO  L358      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2023-11-19 07:58:29,808 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 83 states, 63 states have (on average 1.380952380952381) internal successors, (87), 70 states have internal predecessors, (87), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11)
[2023-11-19 07:58:29,817 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 26
[2023-11-19 07:58:29,817 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:58:29,817 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:58:29,818 INFO  L420      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:58:29,823 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:58:29,824 INFO  L85        PathProgramCache]: Analyzing trace with hash -533939434, now seen corresponding path program 1 times
[2023-11-19 07:58:29,832 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:58:29,832 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1641142926]
[2023-11-19 07:58:29,833 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:58:29,833 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:58:30,010 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,130 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15
[2023-11-19 07:58:30,134 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,147 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:58:30,157 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:58:30,158 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1641142926]
[2023-11-19 07:58:30,159 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1641142926] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:58:30,159 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:58:30,159 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2023-11-19 07:58:30,161 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524107363]
[2023-11-19 07:58:30,162 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:58:30,166 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2023-11-19 07:58:30,167 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:58:30,209 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2023-11-19 07:58:30,210 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2023-11-19 07:58:30,213 INFO  L87              Difference]: Start difference. First operand  has 83 states, 63 states have (on average 1.380952380952381) internal successors, (87), 70 states have internal predecessors, (87), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,262 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:58:30,262 INFO  L93              Difference]: Finished difference Result 157 states and 212 transitions.
[2023-11-19 07:58:30,263 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2023-11-19 07:58:30,265 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25
[2023-11-19 07:58:30,265 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:58:30,276 INFO  L225             Difference]: With dead ends: 157
[2023-11-19 07:58:30,276 INFO  L226             Difference]: Without dead ends: 74
[2023-11-19 07:58:30,281 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2023-11-19 07:58:30,286 INFO  L413           NwaCegarLoop]: 103 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:58:30,287 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:58:30,306 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 74 states.
[2023-11-19 07:58:30,334 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74.
[2023-11-19 07:58:30,335 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 74 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 62 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10)
[2023-11-19 07:58:30,344 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 94 transitions.
[2023-11-19 07:58:30,347 INFO  L78                 Accepts]: Start accepts. Automaton has 74 states and 94 transitions. Word has length 25
[2023-11-19 07:58:30,347 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:58:30,348 INFO  L495      AbstractCegarLoop]: Abstraction has 74 states and 94 transitions.
[2023-11-19 07:58:30,349 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,350 INFO  L276                IsEmpty]: Start isEmpty. Operand 74 states and 94 transitions.
[2023-11-19 07:58:30,354 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 27
[2023-11-19 07:58:30,355 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:58:30,355 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:58:30,356 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2023-11-19 07:58:30,356 INFO  L420      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:58:30,360 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:58:30,360 INFO  L85        PathProgramCache]: Analyzing trace with hash -1868756667, now seen corresponding path program 1 times
[2023-11-19 07:58:30,360 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:58:30,361 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960723809]
[2023-11-19 07:58:30,361 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:58:30,361 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:58:30,410 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,533 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16
[2023-11-19 07:58:30,535 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,539 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:58:30,539 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:58:30,539 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960723809]
[2023-11-19 07:58:30,540 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960723809] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:58:30,540 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:58:30,540 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2023-11-19 07:58:30,540 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107324380]
[2023-11-19 07:58:30,541 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:58:30,542 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2023-11-19 07:58:30,542 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:58:30,543 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2023-11-19 07:58:30,543 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:58:30,544 INFO  L87              Difference]: Start difference. First operand 74 states and 94 transitions. Second operand  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,560 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:58:30,560 INFO  L93              Difference]: Finished difference Result 108 states and 136 transitions.
[2023-11-19 07:58:30,561 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2023-11-19 07:58:30,561 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26
[2023-11-19 07:58:30,561 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:58:30,562 INFO  L225             Difference]: With dead ends: 108
[2023-11-19 07:58:30,563 INFO  L226             Difference]: Without dead ends: 65
[2023-11-19 07:58:30,564 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2023-11-19 07:58:30,565 INFO  L413           NwaCegarLoop]: 81 mSDtfsCounter, 17 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:58:30,566 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 140 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:58:30,567 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 65 states.
[2023-11-19 07:58:30,574 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65.
[2023-11-19 07:58:30,575 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 65 states, 50 states have (on average 1.32) internal successors, (66), 56 states have internal predecessors, (66), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8)
[2023-11-19 07:58:30,576 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 82 transitions.
[2023-11-19 07:58:30,576 INFO  L78                 Accepts]: Start accepts. Automaton has 65 states and 82 transitions. Word has length 26
[2023-11-19 07:58:30,577 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:58:30,577 INFO  L495      AbstractCegarLoop]: Abstraction has 65 states and 82 transitions.
[2023-11-19 07:58:30,577 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,577 INFO  L276                IsEmpty]: Start isEmpty. Operand 65 states and 82 transitions.
[2023-11-19 07:58:30,579 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2023-11-19 07:58:30,579 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:58:30,579 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:58:30,580 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2023-11-19 07:58:30,580 INFO  L420      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:58:30,580 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:58:30,581 INFO  L85        PathProgramCache]: Analyzing trace with hash 1886146375, now seen corresponding path program 1 times
[2023-11-19 07:58:30,581 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:58:30,581 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139174185]
[2023-11-19 07:58:30,581 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:58:30,582 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:58:30,605 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,763 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21
[2023-11-19 07:58:30,765 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:30,767 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:58:30,768 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:58:30,768 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139174185]
[2023-11-19 07:58:30,768 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [139174185] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:58:30,768 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:58:30,768 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2023-11-19 07:58:30,769 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907510817]
[2023-11-19 07:58:30,769 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:58:30,769 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2023-11-19 07:58:30,770 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:58:30,770 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2023-11-19 07:58:30,770 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2023-11-19 07:58:30,771 INFO  L87              Difference]: Start difference. First operand 65 states and 82 transitions. Second operand  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,922 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:58:30,922 INFO  L93              Difference]: Finished difference Result 165 states and 213 transitions.
[2023-11-19 07:58:30,923 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2023-11-19 07:58:30,923 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31
[2023-11-19 07:58:30,924 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:58:30,926 INFO  L225             Difference]: With dead ends: 165
[2023-11-19 07:58:30,926 INFO  L226             Difference]: Without dead ends: 108
[2023-11-19 07:58:30,927 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56
[2023-11-19 07:58:30,929 INFO  L413           NwaCegarLoop]: 92 mSDtfsCounter, 147 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2023-11-19 07:58:30,929 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 284 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2023-11-19 07:58:30,931 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 108 states.
[2023-11-19 07:58:30,947 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 105.
[2023-11-19 07:58:30,948 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 105 states, 80 states have (on average 1.35) internal successors, (108), 89 states have internal predecessors, (108), 13 states have call successors, (13), 11 states have call predecessors, (13), 11 states have return successors, (14), 10 states have call predecessors, (14), 13 states have call successors, (14)
[2023-11-19 07:58:30,949 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 135 transitions.
[2023-11-19 07:58:30,949 INFO  L78                 Accepts]: Start accepts. Automaton has 105 states and 135 transitions. Word has length 31
[2023-11-19 07:58:30,950 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:58:30,950 INFO  L495      AbstractCegarLoop]: Abstraction has 105 states and 135 transitions.
[2023-11-19 07:58:30,950 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:30,950 INFO  L276                IsEmpty]: Start isEmpty. Operand 105 states and 135 transitions.
[2023-11-19 07:58:30,952 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 35
[2023-11-19 07:58:30,952 INFO  L187           NwaCegarLoop]: Found error trace
[2023-11-19 07:58:30,952 INFO  L195           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2023-11-19 07:58:30,953 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2023-11-19 07:58:30,953 INFO  L420      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2023-11-19 07:58:30,953 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2023-11-19 07:58:30,954 INFO  L85        PathProgramCache]: Analyzing trace with hash 1556691395, now seen corresponding path program 1 times
[2023-11-19 07:58:30,954 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2023-11-19 07:58:30,954 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684559592]
[2023-11-19 07:58:30,954 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2023-11-19 07:58:30,955 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2023-11-19 07:58:30,974 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:31,099 INFO  L376   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24
[2023-11-19 07:58:31,101 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2023-11-19 07:58:31,105 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2023-11-19 07:58:31,105 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2023-11-19 07:58:31,105 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684559592]
[2023-11-19 07:58:31,105 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [684559592] provided 1 perfect and 0 imperfect interpolant sequences
[2023-11-19 07:58:31,106 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2023-11-19 07:58:31,106 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2023-11-19 07:58:31,106 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1397368586]
[2023-11-19 07:58:31,106 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2023-11-19 07:58:31,107 INFO  L571      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2023-11-19 07:58:31,107 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2023-11-19 07:58:31,108 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2023-11-19 07:58:31,108 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2023-11-19 07:58:31,108 INFO  L87              Difference]: Start difference. First operand 105 states and 135 transitions. Second operand  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:31,184 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2023-11-19 07:58:31,184 INFO  L93              Difference]: Finished difference Result 185 states and 242 transitions.
[2023-11-19 07:58:31,184 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2023-11-19 07:58:31,185 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34
[2023-11-19 07:58:31,186 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2023-11-19 07:58:31,186 INFO  L225             Difference]: With dead ends: 185
[2023-11-19 07:58:31,186 INFO  L226             Difference]: Without dead ends: 0
[2023-11-19 07:58:31,190 INFO  L412           NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42
[2023-11-19 07:58:31,199 INFO  L413           NwaCegarLoop]: 54 mSDtfsCounter, 36 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2023-11-19 07:58:31,200 INFO  L414           NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 157 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2023-11-19 07:58:31,200 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 0 states.
[2023-11-19 07:58:31,201 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0.
[2023-11-19 07:58:31,201 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2023-11-19 07:58:31,201 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions.
[2023-11-19 07:58:31,201 INFO  L78                 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 34
[2023-11-19 07:58:31,202 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2023-11-19 07:58:31,202 INFO  L495      AbstractCegarLoop]: Abstraction has 0 states and 0 transitions.
[2023-11-19 07:58:31,202 INFO  L496      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2023-11-19 07:58:31,202 INFO  L276                IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions.
[2023-11-19 07:58:31,202 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2023-11-19 07:58:31,205 INFO  L805   garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2023-11-19 07:58:31,206 WARN  L477      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2023-11-19 07:58:31,208 INFO  L343    DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions.
[2023-11-19 07:58:31,405 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 841 848) no Hoare annotation was computed.
[2023-11-19 07:58:31,405 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 841 848) the Hoare annotation is: true
[2023-11-19 07:58:31,405 INFO  L899   garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 841 848) no Hoare annotation was computed.
[2023-11-19 07:58:31,406 INFO  L899   garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 800 806) no Hoare annotation was computed.
[2023-11-19 07:58:31,406 INFO  L902   garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 800 806) the Hoare annotation is: true
[2023-11-19 07:58:31,406 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 162 173) the Hoare annotation is: true
[2023-11-19 07:58:31,406 INFO  L899   garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 162 173) no Hoare annotation was computed.
[2023-11-19 07:58:31,407 INFO  L899   garLoopResultBuilder]: For program point L166-1(lines 162 173) no Hoare annotation was computed.
[2023-11-19 07:58:31,407 INFO  L899   garLoopResultBuilder]: For program point L787-1(lines 787 793) no Hoare annotation was computed.
[2023-11-19 07:58:31,407 INFO  L899   garLoopResultBuilder]: For program point L816(lines 816 824) no Hoare annotation was computed.
[2023-11-19 07:58:31,408 INFO  L899   garLoopResultBuilder]: For program point isLowWaterSensorDry_returnLabel#1(lines 215 223) no Hoare annotation was computed.
[2023-11-19 07:58:31,408 INFO  L899   garLoopResultBuilder]: For program point L812(lines 812 829) no Hoare annotation was computed.
[2023-11-19 07:58:31,409 INFO  L899   garLoopResultBuilder]: For program point timeShiftFINAL(lines 776 799) no Hoare annotation was computed.
[2023-11-19 07:58:31,409 INFO  L899   garLoopResultBuilder]: For program point L780-1(lines 779 798) no Hoare annotation was computed.
[2023-11-19 07:58:31,411 INFO  L899   garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed.
[2023-11-19 07:58:31,411 INFO  L899   garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed.
[2023-11-19 07:58:31,412 INFO  L899   garLoopResultBuilder]: For program point L70-1(lines 62 90) no Hoare annotation was computed.
[2023-11-19 07:58:31,413 INFO  L895   garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2023-11-19 07:58:31,414 INFO  L895   garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: (not (= |old(~pumpRunning~0)| 0))
[2023-11-19 07:58:31,414 INFO  L899   garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed.
[2023-11-19 07:58:31,415 INFO  L899   garLoopResultBuilder]: For program point __automaton_fail_returnLabel#1(lines 691 698) no Hoare annotation was computed.
[2023-11-19 07:58:31,415 INFO  L895   garLoopResultBuilder]: At program point $Ultimate##0(lines 776 799) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0))
[2023-11-19 07:58:31,415 INFO  L899   garLoopResultBuilder]: For program point isLowWaterLevel_returnLabel#1(lines 905 923) no Hoare annotation was computed.
[2023-11-19 07:58:31,415 INFO  L895   garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (not (= 0 ~systemActive~0))))
[2023-11-19 07:58:31,416 INFO  L899   garLoopResultBuilder]: For program point L827-1(lines 808 832) no Hoare annotation was computed.
[2023-11-19 07:58:31,416 INFO  L899   garLoopResultBuilder]: For program point L695(line 695) no Hoare annotation was computed.
[2023-11-19 07:58:31,416 INFO  L899   garLoopResultBuilder]: For program point L914(lines 914 918) no Hoare annotation was computed.
[2023-11-19 07:58:31,416 INFO  L899   garLoopResultBuilder]: For program point L914-2(lines 914 918) no Hoare annotation was computed.
[2023-11-19 07:58:31,416 INFO  L899   garLoopResultBuilder]: For program point L142(lines 142 146) no Hoare annotation was computed.
[2023-11-19 07:58:31,417 INFO  L899   garLoopResultBuilder]: For program point L142-2(lines 138 149) no Hoare annotation was computed.
[2023-11-19 07:58:31,418 INFO  L899   garLoopResultBuilder]: For program point timeShiftEXIT(lines 776 799) no Hoare annotation was computed.
[2023-11-19 07:58:31,418 INFO  L899   garLoopResultBuilder]: For program point isPumpRunning_returnLabel#1(lines 860 868) no Hoare annotation was computed.
[2023-11-19 07:58:31,418 INFO  L899   garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 695) no Hoare annotation was computed.
[2023-11-19 07:58:31,418 INFO  L895   garLoopResultBuilder]: At program point L68(line 68) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0))
[2023-11-19 07:58:31,419 INFO  L899   garLoopResultBuilder]: For program point L68-1(line 68) no Hoare annotation was computed.
[2023-11-19 07:58:31,419 INFO  L899   garLoopResultBuilder]: For program point cleanupEXIT(lines 227 256) no Hoare annotation was computed.
[2023-11-19 07:58:31,419 INFO  L899   garLoopResultBuilder]: For program point L252(lines 227 256) no Hoare annotation was computed.
[2023-11-19 07:58:31,420 INFO  L899   garLoopResultBuilder]: For program point L248(line 248) no Hoare annotation was computed.
[2023-11-19 07:58:31,420 INFO  L899   garLoopResultBuilder]: For program point L241(lines 241 245) no Hoare annotation was computed.
[2023-11-19 07:58:31,420 INFO  L902   garLoopResultBuilder]: At program point L241-1(lines 241 245) the Hoare annotation is: true
[2023-11-19 07:58:31,421 INFO  L899   garLoopResultBuilder]: For program point L238(line 238) no Hoare annotation was computed.
[2023-11-19 07:58:31,421 INFO  L902   garLoopResultBuilder]: At program point L237-2(lines 237 251) the Hoare annotation is: true
[2023-11-19 07:58:31,423 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 227 256) the Hoare annotation is: true
[2023-11-19 07:58:31,424 INFO  L902   garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: true
[2023-11-19 07:58:31,424 INFO  L899   garLoopResultBuilder]: For program point L233-1(line 233) no Hoare annotation was computed.
[2023-11-19 07:58:31,425 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 174 182) the Hoare annotation is: true
[2023-11-19 07:58:31,429 INFO  L899   garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 174 182) no Hoare annotation was computed.
[2023-11-19 07:58:31,429 INFO  L899   garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 174 182) no Hoare annotation was computed.
[2023-11-19 07:58:31,430 INFO  L899   garLoopResultBuilder]: For program point startSystem_returnLabel#1(lines 939 946) no Hoare annotation was computed.
[2023-11-19 07:58:31,430 INFO  L895   garLoopResultBuilder]: At program point L762(lines 711 763) the Hoare annotation is: false
[2023-11-19 07:58:31,430 INFO  L899   garLoopResultBuilder]: For program point runTest_returnLabel#1(lines 290 300) no Hoare annotation was computed.
[2023-11-19 07:58:31,430 INFO  L899   garLoopResultBuilder]: For program point L750(lines 750 756) no Hoare annotation was computed.
[2023-11-19 07:58:31,431 INFO  L895   garLoopResultBuilder]: At program point L750-2(lines 742 757) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1))
[2023-11-19 07:58:31,432 INFO  L899   garLoopResultBuilder]: For program point select_features_returnLabel#1(lines 106 112) no Hoare annotation was computed.
[2023-11-19 07:58:31,432 INFO  L899   garLoopResultBuilder]: For program point L713(lines 712 761) no Hoare annotation was computed.
[2023-11-19 07:58:31,438 INFO  L899   garLoopResultBuilder]: For program point main_returnLabel#1(lines 301 323) no Hoare annotation was computed.
[2023-11-19 07:58:31,438 INFO  L899   garLoopResultBuilder]: For program point L742(lines 742 757) no Hoare annotation was computed.
[2023-11-19 07:58:31,439 INFO  L899   garLoopResultBuilder]: For program point L928(lines 928 934) no Hoare annotation was computed.
[2023-11-19 07:58:31,439 INFO  L899   garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed.
[2023-11-19 07:58:31,439 INFO  L899   garLoopResultBuilder]: For program point L928-1(lines 928 934) no Hoare annotation was computed.
[2023-11-19 07:58:31,439 INFO  L895   garLoopResultBuilder]: At program point L734(line 734) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1))
[2023-11-19 07:58:31,439 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed.
[2023-11-19 07:58:31,440 INFO  L895   garLoopResultBuilder]: At program point L759(lines 712 761) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1))
[2023-11-19 07:58:31,440 INFO  L899   garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed.
[2023-11-19 07:58:31,440 INFO  L899   garLoopResultBuilder]: For program point L722-1(lines 722 728) no Hoare annotation was computed.
[2023-11-19 07:58:31,440 INFO  L899   garLoopResultBuilder]: For program point L714(lines 714 718) no Hoare annotation was computed.
[2023-11-19 07:58:31,440 INFO  L899   garLoopResultBuilder]: For program point setup_returnLabel#1(lines 282 288) no Hoare annotation was computed.
[2023-11-19 07:58:31,440 INFO  L899   garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed.
[2023-11-19 07:58:31,441 INFO  L899   garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed.
[2023-11-19 07:58:31,441 INFO  L899   garLoopResultBuilder]: For program point select_helpers_returnLabel#1(lines 113 119) no Hoare annotation was computed.
[2023-11-19 07:58:31,441 INFO  L895   garLoopResultBuilder]: At program point L930(line 930) the Hoare annotation is: false
[2023-11-19 07:58:31,441 INFO  L899   garLoopResultBuilder]: For program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 54 61) no Hoare annotation was computed.
[2023-11-19 07:58:31,442 INFO  L899   garLoopResultBuilder]: For program point L765(lines 702 769) no Hoare annotation was computed.
[2023-11-19 07:58:31,442 INFO  L899   garLoopResultBuilder]: For program point L732(lines 732 738) no Hoare annotation was computed.
[2023-11-19 07:58:31,442 INFO  L899   garLoopResultBuilder]: For program point L732-1(lines 732 738) no Hoare annotation was computed.
[2023-11-19 07:58:31,442 INFO  L899   garLoopResultBuilder]: For program point L311(lines 311 318) no Hoare annotation was computed.
[2023-11-19 07:58:31,442 INFO  L899   garLoopResultBuilder]: For program point L311-2(lines 311 318) no Hoare annotation was computed.
[2023-11-19 07:58:31,443 INFO  L895   garLoopResultBuilder]: At program point L724(line 724) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~1#1| 1))
[2023-11-19 07:58:31,443 INFO  L899   garLoopResultBuilder]: For program point stopSystem_returnLabel#1(lines 924 938) no Hoare annotation was computed.
[2023-11-19 07:58:31,443 INFO  L899   garLoopResultBuilder]: For program point valid_product_returnLabel#1(lines 120 128) no Hoare annotation was computed.
[2023-11-19 07:58:31,443 INFO  L899   garLoopResultBuilder]: For program point waterRiseEXIT(lines 150 161) no Hoare annotation was computed.
[2023-11-19 07:58:31,443 INFO  L902   garLoopResultBuilder]: At program point $Ultimate##0(lines 150 161) the Hoare annotation is: true
[2023-11-19 07:58:31,443 INFO  L899   garLoopResultBuilder]: For program point L154-1(lines 150 161) no Hoare annotation was computed.
[2023-11-19 07:58:31,446 INFO  L445         BasicCegarLoop]: Path program histogram: [1, 1, 1, 1]
[2023-11-19 07:58:31,448 INFO  L178   ceAbstractionStarter]: Computing trace abstraction results
[2023-11-19 07:58:31,461 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 07:58:31 BoogieIcfgContainer
[2023-11-19 07:58:31,461 INFO  L131        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2023-11-19 07:58:31,462 INFO  L112        PluginConnector]: ------------------------Witness Printer----------------------------
[2023-11-19 07:58:31,462 INFO  L270        PluginConnector]: Initializing Witness Printer...
[2023-11-19 07:58:31,462 INFO  L274        PluginConnector]: Witness Printer initialized
[2023-11-19 07:58:31,463 INFO  L184        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 07:58:29" (3/4) ...
[2023-11-19 07:58:31,467 INFO  L137         WitnessPrinter]: Generating witness for correct program
[2023-11-19 07:58:31,472 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical
[2023-11-19 07:58:31,473 INFO  L361     RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise
[2023-11-19 07:58:31,484 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges
[2023-11-19 07:58:31,484 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges
[2023-11-19 07:58:31,485 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges
[2023-11-19 07:58:31,486 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2023-11-19 07:58:31,486 INFO  L943   BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges
[2023-11-19 07:58:31,517 WARN  L220   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1))
[2023-11-19 07:58:31,564 WARN  L141   nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1))
[2023-11-19 07:58:31,620 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/witness.graphml
[2023-11-19 07:58:31,623 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/witness.yml
[2023-11-19 07:58:31,623 INFO  L131        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2023-11-19 07:58:31,624 INFO  L158              Benchmark]: Toolchain (without parser) took 3062.28ms. Allocated memory was 134.2MB in the beginning and 167.8MB in the end (delta: 33.6MB). Free memory was 101.6MB in the beginning and 118.8MB in the end (delta: -17.2MB). Peak memory consumption was 18.2MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,624 INFO  L158              Benchmark]: CDTParser took 0.21ms. Allocated memory is still 134.2MB. Free memory is still 107.7MB. There was no memory consumed. Max. memory is 16.1GB.
[2023-11-19 07:58:31,625 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 539.28ms. Allocated memory is still 134.2MB. Free memory was 101.6MB in the beginning and 82.1MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,625 INFO  L158              Benchmark]: Boogie Procedure Inliner took 67.03ms. Allocated memory is still 134.2MB. Free memory was 82.1MB in the beginning and 80.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,626 INFO  L158              Benchmark]: Boogie Preprocessor took 54.16ms. Allocated memory is still 134.2MB. Free memory was 80.0MB in the beginning and 78.7MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB.
[2023-11-19 07:58:31,627 INFO  L158              Benchmark]: RCFGBuilder took 472.98ms. Allocated memory is still 134.2MB. Free memory was 78.3MB in the beginning and 62.8MB in the end (delta: 15.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,628 INFO  L158              Benchmark]: TraceAbstraction took 1758.69ms. Allocated memory was 134.2MB in the beginning and 167.8MB in the end (delta: 33.6MB). Free memory was 61.9MB in the beginning and 125.1MB in the end (delta: -63.2MB). Peak memory consumption was 24.7MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,628 INFO  L158              Benchmark]: Witness Printer took 161.48ms. Allocated memory is still 167.8MB. Free memory was 125.1MB in the beginning and 118.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB.
[2023-11-19 07:58:31,633 INFO  L338   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.21ms. Allocated memory is still 134.2MB. Free memory is still 107.7MB. There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 539.28ms. Allocated memory is still 134.2MB. Free memory was 101.6MB in the beginning and 82.1MB in the end (delta: 19.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 67.03ms. Allocated memory is still 134.2MB. Free memory was 82.1MB in the beginning and 80.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 54.16ms. Allocated memory is still 134.2MB. Free memory was 80.0MB in the beginning and 78.7MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB.
 * RCFGBuilder took 472.98ms. Allocated memory is still 134.2MB. Free memory was 78.3MB in the beginning and 62.8MB in the end (delta: 15.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 1758.69ms. Allocated memory was 134.2MB in the beginning and 167.8MB in the end (delta: 33.6MB). Free memory was 61.9MB in the beginning and 125.1MB in the end (delta: -63.2MB). Peak memory consumption was 24.7MB. Max. memory is 16.1GB.
 * Witness Printer took 161.48ms. Allocated memory is still 167.8MB. Free memory was 125.1MB in the beginning and 118.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator:
  - GenericResultAtLocation [Line: 49]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [49]
  - GenericResultAtLocation [Line: 91]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [91]
  - GenericResultAtLocation [Line: 129]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [129]
  - GenericResultAtLocation [Line: 224]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [224]
  - GenericResultAtLocation [Line: 324]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [324]
  - GenericResultAtLocation [Line: 690]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [690]
  - GenericResultAtLocation [Line: 699]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [699]
  - GenericResultAtLocation [Line: 770]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [770]
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - PositiveResult [Line: 695]: a call to reach_error is unreachable
    For all program executions holds that a call to reach_error is unreachable at this location
  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 8 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 204 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 200 mSDsluCounter, 684 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 354 mSDsCounter, 22 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 29 IncrementalHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 22 mSolverCounterUnsat, 330 mSDtfsCounter, 29 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=105occurred in iteration=3, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 20 LocationsWithAnnotation, 100 PreInvPairs, 113 NumberOfFragments, 100 HoareAnnotationTreeSize, 100 FomulaSimplifications, 9 FormulaSimplificationTreeSizeReduction, 0.0s HoareSimplificationTime, 20 FomulaSimplificationsInter, 201 FormulaSimplificationTreeSizeReductionInter, 0.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 116 NumberOfCodeBlocks, 116 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 112 ConstructedInterpolants, 0 QuantifiedInterpolants, 188 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available
  - AllSpecificationsHoldResult: All specifications hold
    1 specifications checked. All of them hold
  - InvariantResult [Line: 712]: Loop Invariant
    Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1))
  - InvariantResult [Line: 711]: Loop Invariant
    Derived loop invariant: 0
  - InvariantResult [Line: 237]: Loop Invariant
    Derived loop invariant: 1
RESULT: Ultimate proved your program to be correct!
[2023-11-19 07:58:31,673 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f2366a2f-dd4c-4e3a-b7e2-95bb8f1b1d42/bin/uautomizer-verify-uCwYo4JHxu/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Result:
TRUE