./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version d790fecc
Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 87e1d1b45ecae6206db87e264fd33705b608c5376aceaefe9ff79eccaaf25b96
--- Real Ultimate output ---
This is Ultimate 0.3.0-dev-d790fec
[2024-12-02 15:03:54,229 INFO  L188        SettingsManager]: Resetting all preferences to default values...
[2024-12-02 15:03:54,282 INFO  L114        SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf
[2024-12-02 15:03:54,287 WARN  L101        SettingsManager]: Preference file contains the following unknown settings:
[2024-12-02 15:03:54,287 WARN  L103        SettingsManager]:   * de.uni_freiburg.informatik.ultimate.core.Log level for class
[2024-12-02 15:03:54,308 INFO  L130        SettingsManager]: Preferences different from defaults after loading the file:
[2024-12-02 15:03:54,308 INFO  L151        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2024-12-02 15:03:54,308 INFO  L153        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2024-12-02 15:03:54,309 INFO  L151        SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults:
[2024-12-02 15:03:54,309 INFO  L153        SettingsManager]:  * Use memory slicer=true
[2024-12-02 15:03:54,309 INFO  L151        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2024-12-02 15:03:54,309 INFO  L153        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2024-12-02 15:03:54,309 INFO  L151        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Create parallel compositions if possible=false
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Use SBE=true
[2024-12-02 15:03:54,310 INFO  L151        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * sizeof long=4
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Overapproximate operations on floating types=true
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * sizeof POINTER=4
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Check division by zero=IGNORE
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * sizeof long double=12
[2024-12-02 15:03:54,310 INFO  L153        SettingsManager]:  * Check if freed pointer was valid=false
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Use constant arrays=true
[2024-12-02 15:03:54,311 INFO  L151        SettingsManager]: Preferences of IcfgBuilder differ from their defaults:
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Only consider context switches at boundaries of atomic blocks=true
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 15:03:54,311 INFO  L151        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Only consider context switches at boundaries of atomic blocks=true
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2024-12-02 15:03:54,311 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 15:03:54,312 INFO  L151        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Compute procedure contracts=false
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopHeads
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Trace refinement strategy=CAMEL
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Apply one-shot large block encoding in concurrent analysis=false
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Order on configurations for Petri net unfoldings=DBO
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2024-12-02 15:03:54,312 INFO  L153        SettingsManager]:  * Looper check in Petri net analysis=SEMANTIC
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87e1d1b45ecae6206db87e264fd33705b608c5376aceaefe9ff79eccaaf25b96
[2024-12-02 15:03:54,544 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2024-12-02 15:03:54,552 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2024-12-02 15:03:54,554 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2024-12-02 15:03:54,555 INFO  L270        PluginConnector]: Initializing CDTParser...
[2024-12-02 15:03:54,555 INFO  L274        PluginConnector]: CDTParser initialized
[2024-12-02 15:03:54,556 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c
[2024-12-02 15:03:57,300 INFO  L533              CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/data/12c0d44de/4ad2fdf6289e449eb29feca17ac3fa73/FLAG56b29185e
[2024-12-02 15:03:57,552 INFO  L384              CDTParser]: Found 1 translation units.
[2024-12-02 15:03:57,553 INFO  L180              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c
[2024-12-02 15:03:57,562 INFO  L427              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/data/12c0d44de/4ad2fdf6289e449eb29feca17ac3fa73/FLAG56b29185e
[2024-12-02 15:03:57,875 INFO  L435              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/data/12c0d44de/4ad2fdf6289e449eb29feca17ac3fa73
[2024-12-02 15:03:57,877 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2024-12-02 15:03:57,879 INFO  L133        ToolchainWalker]: Walking toolchain with 6 elements.
[2024-12-02 15:03:57,880 INFO  L112        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2024-12-02 15:03:57,880 INFO  L270        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2024-12-02 15:03:57,884 INFO  L274        PluginConnector]: CACSL2BoogieTranslator initialized
[2024-12-02 15:03:57,885 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:03:57" (1/1) ...
[2024-12-02 15:03:57,885 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@120ee43f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:57, skipping insertion in model container
[2024-12-02 15:03:57,885 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 03:03:57" (1/1) ...
[2024-12-02 15:03:57,919 INFO  L175         MainTranslator]: Built tables and reachable declarations
[2024-12-02 15:03:58,122 WARN  L250   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c[15496,15509]
[2024-12-02 15:03:58,135 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-12-02 15:03:58,145 INFO  L200         MainTranslator]: Completed pre-run
[2024-12-02 15:03:58,153 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [453]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [525]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [727]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [736]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [831]
[2024-12-02 15:03:58,155 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [927]
[2024-12-02 15:03:58,197 WARN  L250   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/sv-benchmarks/c/product-lines/minepump_spec4_product39.cil.c[15496,15509]
[2024-12-02 15:03:58,204 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-12-02 15:03:58,221 INFO  L204         MainTranslator]: Completed translation
[2024-12-02 15:03:58,222 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58 WrapperNode
[2024-12-02 15:03:58,222 INFO  L131        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2024-12-02 15:03:58,223 INFO  L112        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2024-12-02 15:03:58,223 INFO  L270        PluginConnector]: Initializing Boogie Procedure Inliner...
[2024-12-02 15:03:58,223 INFO  L274        PluginConnector]: Boogie Procedure Inliner initialized
[2024-12-02 15:03:58,230 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,239 INFO  L184        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,257 INFO  L138                Inliner]: procedures = 54, calls = 99, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 200
[2024-12-02 15:03:58,257 INFO  L131        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2024-12-02 15:03:58,258 INFO  L112        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2024-12-02 15:03:58,258 INFO  L270        PluginConnector]: Initializing Boogie Preprocessor...
[2024-12-02 15:03:58,258 INFO  L274        PluginConnector]: Boogie Preprocessor initialized
[2024-12-02 15:03:58,267 INFO  L184        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,267 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,269 INFO  L184        PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,282 INFO  L175           MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0].
[2024-12-02 15:03:58,282 INFO  L184        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,283 INFO  L184        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,287 INFO  L184        PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,288 INFO  L184        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,290 INFO  L184        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,291 INFO  L184        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,292 INFO  L184        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,293 INFO  L131        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2024-12-02 15:03:58,294 INFO  L112        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2024-12-02 15:03:58,294 INFO  L270        PluginConnector]: Initializing RCFGBuilder...
[2024-12-02 15:03:58,294 INFO  L274        PluginConnector]: RCFGBuilder initialized
[2024-12-02 15:03:58,294 INFO  L184        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (1/1) ...
[2024-12-02 15:03:58,298 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 15:03:58,308 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3
[2024-12-02 15:03:58,318 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null)
[2024-12-02 15:03:58,320 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process
[2024-12-02 15:03:58,342 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2024-12-02 15:03:58,342 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base
[2024-12-02 15:03:58,342 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base
[2024-12-02 15:03:58,342 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2024-12-02 15:03:58,342 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2024-12-02 15:03:58,342 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure deactivatePump
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure deactivatePump
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int#0
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2024-12-02 15:03:58,343 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2024-12-02 15:03:58,343 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2024-12-02 15:03:58,409 INFO  L234             CfgBuilder]: Building ICFG
[2024-12-02 15:03:58,411 INFO  L260             CfgBuilder]: Building CFG for each procedure with an implementation
[2024-12-02 15:03:58,630 INFO  L?                        ?]: Removed 43 outVars from TransFormulas that were not future-live.
[2024-12-02 15:03:58,630 INFO  L283             CfgBuilder]: Performing block encoding
[2024-12-02 15:03:58,639 INFO  L307             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2024-12-02 15:03:58,640 INFO  L312             CfgBuilder]: Removed 4 assume(true) statements.
[2024-12-02 15:03:58,640 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:03:58 BoogieIcfgContainer
[2024-12-02 15:03:58,640 INFO  L131        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2024-12-02 15:03:58,642 INFO  L112        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2024-12-02 15:03:58,643 INFO  L270        PluginConnector]: Initializing TraceAbstraction...
[2024-12-02 15:03:58,648 INFO  L274        PluginConnector]: TraceAbstraction initialized
[2024-12-02 15:03:58,648 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 03:03:57" (1/3) ...
[2024-12-02 15:03:58,648 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@74b3ff49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:03:58, skipping insertion in model container
[2024-12-02 15:03:58,649 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 03:03:58" (2/3) ...
[2024-12-02 15:03:58,649 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@74b3ff49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 03:03:58, skipping insertion in model container
[2024-12-02 15:03:58,649 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:03:58" (3/3) ...
[2024-12-02 15:03:58,650 INFO  L128   eAbstractionObserver]: Analyzing ICFG minepump_spec4_product39.cil.c
[2024-12-02 15:03:58,662 INFO  L216   ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2024-12-02 15:03:58,663 INFO  L151   ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec4_product39.cil.c that has 8 procedures, 85 locations, 1 initial locations, 2 loop locations, and 1 error locations.
[2024-12-02 15:03:58,714 INFO  L332      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2024-12-02 15:03:58,726 INFO  L333      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@672c50ba, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms]
[2024-12-02 15:03:58,727 INFO  L334      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2024-12-02 15:03:58,731 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 85 states, 64 states have (on average 1.40625) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12)
[2024-12-02 15:03:58,738 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2024-12-02 15:03:58,738 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:58,739 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:58,739 INFO  L396      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:58,744 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:58,744 INFO  L85        PathProgramCache]: Analyzing trace with hash -1731113320, now seen corresponding path program 1 times
[2024-12-02 15:03:58,752 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:58,752 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [611202800]
[2024-12-02 15:03:58,752 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:58,753 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:58,843 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:58,894 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:58,894 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:58,895 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [611202800]
[2024-12-02 15:03:58,895 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [611202800] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:58,895 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:58,896 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-12-02 15:03:58,897 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193655058]
[2024-12-02 15:03:58,897 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:58,901 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2024-12-02 15:03:58,901 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:58,927 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2024-12-02 15:03:58,927 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2024-12-02 15:03:58,929 INFO  L87              Difference]: Start difference. First operand  has 85 states, 64 states have (on average 1.40625) internal successors, (90), 73 states have internal predecessors, (90), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:58,951 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:58,951 INFO  L93              Difference]: Finished difference Result 162 states and 223 transitions.
[2024-12-02 15:03:58,952 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2024-12-02 15:03:58,953 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2024-12-02 15:03:58,953 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:58,960 INFO  L225             Difference]: With dead ends: 162
[2024-12-02 15:03:58,961 INFO  L226             Difference]: Without dead ends: 76
[2024-12-02 15:03:58,963 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2024-12-02 15:03:58,966 INFO  L435           NwaCegarLoop]: 108 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:58,966 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:58,978 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 76 states.
[2024-12-02 15:03:58,993 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76.
[2024-12-02 15:03:58,994 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11)
[2024-12-02 15:03:58,998 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 99 transitions.
[2024-12-02 15:03:58,999 INFO  L78                 Accepts]: Start accepts. Automaton has 76 states and 99 transitions. Word has length 19
[2024-12-02 15:03:59,000 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,000 INFO  L471      AbstractCegarLoop]: Abstraction has 76 states and 99 transitions.
[2024-12-02 15:03:59,000 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,000 INFO  L276                IsEmpty]: Start isEmpty. Operand 76 states and 99 transitions.
[2024-12-02 15:03:59,001 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2024-12-02 15:03:59,001 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,001 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,002 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2024-12-02 15:03:59,002 INFO  L396      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,002 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,002 INFO  L85        PathProgramCache]: Analyzing trace with hash -956617006, now seen corresponding path program 1 times
[2024-12-02 15:03:59,002 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,003 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620942445]
[2024-12-02 15:03:59,003 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,003 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,023 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:59,095 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:59,095 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:59,095 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620942445]
[2024-12-02 15:03:59,095 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620942445] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:59,095 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:59,096 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-12-02 15:03:59,096 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [4710651]
[2024-12-02 15:03:59,096 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:59,097 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-12-02 15:03:59,097 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:59,097 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-12-02 15:03:59,098 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,098 INFO  L87              Difference]: Start difference. First operand 76 states and 99 transitions. Second operand  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,115 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:59,116 INFO  L93              Difference]: Finished difference Result 116 states and 150 transitions.
[2024-12-02 15:03:59,116 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-12-02 15:03:59,117 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2024-12-02 15:03:59,117 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:59,118 INFO  L225             Difference]: With dead ends: 116
[2024-12-02 15:03:59,118 INFO  L226             Difference]: Without dead ends: 68
[2024-12-02 15:03:59,118 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,119 INFO  L435           NwaCegarLoop]: 87 mSDtfsCounter, 16 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:59,120 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 154 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:59,121 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 68 states.
[2024-12-02 15:03:59,128 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 68.
[2024-12-02 15:03:59,128 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 68 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 60 states have internal predecessors, (70), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9)
[2024-12-02 15:03:59,129 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 88 transitions.
[2024-12-02 15:03:59,130 INFO  L78                 Accepts]: Start accepts. Automaton has 68 states and 88 transitions. Word has length 19
[2024-12-02 15:03:59,130 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,130 INFO  L471      AbstractCegarLoop]: Abstraction has 68 states and 88 transitions.
[2024-12-02 15:03:59,130 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,130 INFO  L276                IsEmpty]: Start isEmpty. Operand 68 states and 88 transitions.
[2024-12-02 15:03:59,131 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 24
[2024-12-02 15:03:59,131 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,131 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,132 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2024-12-02 15:03:59,132 INFO  L396      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,132 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,133 INFO  L85        PathProgramCache]: Analyzing trace with hash 1303780622, now seen corresponding path program 1 times
[2024-12-02 15:03:59,133 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,133 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132592261]
[2024-12-02 15:03:59,133 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,133 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,152 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:59,214 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:59,215 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:59,215 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132592261]
[2024-12-02 15:03:59,215 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132592261] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:59,215 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:59,215 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-12-02 15:03:59,216 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105034204]
[2024-12-02 15:03:59,216 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:59,216 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-12-02 15:03:59,216 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:59,217 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-12-02 15:03:59,217 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,217 INFO  L87              Difference]: Start difference. First operand 68 states and 88 transitions. Second operand  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,241 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:59,241 INFO  L93              Difference]: Finished difference Result 189 states and 250 transitions.
[2024-12-02 15:03:59,241 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-12-02 15:03:59,241 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23
[2024-12-02 15:03:59,242 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:59,243 INFO  L225             Difference]: With dead ends: 189
[2024-12-02 15:03:59,243 INFO  L226             Difference]: Without dead ends: 128
[2024-12-02 15:03:59,243 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,244 INFO  L435           NwaCegarLoop]: 99 mSDtfsCounter, 69 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:59,244 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 177 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:59,244 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 128 states.
[2024-12-02 15:03:59,256 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125.
[2024-12-02 15:03:59,256 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 125 states, 94 states have (on average 1.372340425531915) internal successors, (129), 109 states have internal predecessors, (129), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (18), 11 states have call predecessors, (18), 18 states have call successors, (18)
[2024-12-02 15:03:59,258 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 165 transitions.
[2024-12-02 15:03:59,259 INFO  L78                 Accepts]: Start accepts. Automaton has 125 states and 165 transitions. Word has length 23
[2024-12-02 15:03:59,259 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,259 INFO  L471      AbstractCegarLoop]: Abstraction has 125 states and 165 transitions.
[2024-12-02 15:03:59,259 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,259 INFO  L276                IsEmpty]: Start isEmpty. Operand 125 states and 165 transitions.
[2024-12-02 15:03:59,261 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 28
[2024-12-02 15:03:59,261 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,261 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,261 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2024-12-02 15:03:59,261 INFO  L396      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,261 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,261 INFO  L85        PathProgramCache]: Analyzing trace with hash -409584444, now seen corresponding path program 1 times
[2024-12-02 15:03:59,262 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,262 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589779873]
[2024-12-02 15:03:59,262 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,262 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,278 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:59,388 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:59,388 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:59,388 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589779873]
[2024-12-02 15:03:59,388 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589779873] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:59,388 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:59,389 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4
[2024-12-02 15:03:59,389 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1926448166]
[2024-12-02 15:03:59,389 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:59,389 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 15:03:59,389 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:59,390 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 15:03:59,390 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:03:59,390 INFO  L87              Difference]: Start difference. First operand 125 states and 165 transitions. Second operand  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,491 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:59,491 INFO  L93              Difference]: Finished difference Result 349 states and 480 transitions.
[2024-12-02 15:03:59,491 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 15:03:59,492 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27
[2024-12-02 15:03:59,492 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:59,495 INFO  L225             Difference]: With dead ends: 349
[2024-12-02 15:03:59,495 INFO  L226             Difference]: Without dead ends: 231
[2024-12-02 15:03:59,497 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 15:03:59,497 INFO  L435           NwaCegarLoop]: 82 mSDtfsCounter, 54 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:59,498 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 318 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:59,499 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 231 states.
[2024-12-02 15:03:59,526 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231.
[2024-12-02 15:03:59,527 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 231 states, 172 states have (on average 1.3488372093023255) internal successors, (232), 199 states have internal predecessors, (232), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (38), 20 states have call predecessors, (38), 36 states have call successors, (38)
[2024-12-02 15:03:59,529 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 306 transitions.
[2024-12-02 15:03:59,530 INFO  L78                 Accepts]: Start accepts. Automaton has 231 states and 306 transitions. Word has length 27
[2024-12-02 15:03:59,530 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,530 INFO  L471      AbstractCegarLoop]: Abstraction has 231 states and 306 transitions.
[2024-12-02 15:03:59,531 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,531 INFO  L276                IsEmpty]: Start isEmpty. Operand 231 states and 306 transitions.
[2024-12-02 15:03:59,533 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 30
[2024-12-02 15:03:59,533 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,533 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,533 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2024-12-02 15:03:59,533 INFO  L396      AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,534 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,534 INFO  L85        PathProgramCache]: Analyzing trace with hash -1370056759, now seen corresponding path program 1 times
[2024-12-02 15:03:59,534 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,534 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058793611]
[2024-12-02 15:03:59,534 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,535 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,548 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:59,626 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:59,626 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:59,626 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058793611]
[2024-12-02 15:03:59,626 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058793611] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:59,627 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:59,627 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-12-02 15:03:59,627 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [758443687]
[2024-12-02 15:03:59,627 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:59,627 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-12-02 15:03:59,628 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:59,628 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-12-02 15:03:59,628 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,628 INFO  L87              Difference]: Start difference. First operand 231 states and 306 transitions. Second operand  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 2 states have internal predecessors, (28), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,691 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:59,691 INFO  L93              Difference]: Finished difference Result 569 states and 777 transitions.
[2024-12-02 15:03:59,692 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-12-02 15:03:59,692 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 2 states have internal predecessors, (28), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29
[2024-12-02 15:03:59,692 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:59,695 INFO  L225             Difference]: With dead ends: 569
[2024-12-02 15:03:59,695 INFO  L226             Difference]: Without dead ends: 345
[2024-12-02 15:03:59,696 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 15:03:59,698 INFO  L435           NwaCegarLoop]: 87 mSDtfsCounter, 51 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:59,698 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 141 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:59,699 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 345 states.
[2024-12-02 15:03:59,735 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 336.
[2024-12-02 15:03:59,736 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 336 states, 257 states have (on average 1.311284046692607) internal successors, (337), 277 states have internal predecessors, (337), 41 states have call successors, (41), 39 states have call predecessors, (41), 37 states have return successors, (59), 36 states have call predecessors, (59), 41 states have call successors, (59)
[2024-12-02 15:03:59,739 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 437 transitions.
[2024-12-02 15:03:59,739 INFO  L78                 Accepts]: Start accepts. Automaton has 336 states and 437 transitions. Word has length 29
[2024-12-02 15:03:59,740 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,740 INFO  L471      AbstractCegarLoop]: Abstraction has 336 states and 437 transitions.
[2024-12-02 15:03:59,740 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 2 states have internal predecessors, (28), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 15:03:59,740 INFO  L276                IsEmpty]: Start isEmpty. Operand 336 states and 437 transitions.
[2024-12-02 15:03:59,741 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2024-12-02 15:03:59,741 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,741 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,742 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4
[2024-12-02 15:03:59,742 INFO  L396      AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,742 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,742 INFO  L85        PathProgramCache]: Analyzing trace with hash 934000234, now seen corresponding path program 1 times
[2024-12-02 15:03:59,742 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,742 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519344305]
[2024-12-02 15:03:59,743 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,743 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,758 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:03:59,826 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:03:59,826 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:03:59,827 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519344305]
[2024-12-02 15:03:59,827 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [519344305] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:03:59,827 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:03:59,827 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 15:03:59,827 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039021821]
[2024-12-02 15:03:59,827 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:03:59,827 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 15:03:59,827 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:03:59,828 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 15:03:59,828 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:03:59,828 INFO  L87              Difference]: Start difference. First operand 336 states and 437 transitions. Second operand  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 15:03:59,906 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:03:59,906 INFO  L93              Difference]: Finished difference Result 338 states and 438 transitions.
[2024-12-02 15:03:59,906 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 15:03:59,906 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31
[2024-12-02 15:03:59,907 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:03:59,909 INFO  L225             Difference]: With dead ends: 338
[2024-12-02 15:03:59,909 INFO  L226             Difference]: Without dead ends: 336
[2024-12-02 15:03:59,909 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 15:03:59,910 INFO  L435           NwaCegarLoop]: 85 mSDtfsCounter, 44 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:03:59,910 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 306 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:03:59,912 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 336 states.
[2024-12-02 15:03:59,939 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 336 to 336.
[2024-12-02 15:03:59,940 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 336 states, 257 states have (on average 1.3035019455252919) internal successors, (335), 277 states have internal predecessors, (335), 41 states have call successors, (41), 39 states have call predecessors, (41), 37 states have return successors, (59), 36 states have call predecessors, (59), 41 states have call successors, (59)
[2024-12-02 15:03:59,943 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 435 transitions.
[2024-12-02 15:03:59,944 INFO  L78                 Accepts]: Start accepts. Automaton has 336 states and 435 transitions. Word has length 31
[2024-12-02 15:03:59,944 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:03:59,944 INFO  L471      AbstractCegarLoop]: Abstraction has 336 states and 435 transitions.
[2024-12-02 15:03:59,944 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 15:03:59,945 INFO  L276                IsEmpty]: Start isEmpty. Operand 336 states and 435 transitions.
[2024-12-02 15:03:59,946 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 42
[2024-12-02 15:03:59,946 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:03:59,946 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:03:59,946 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5
[2024-12-02 15:03:59,947 INFO  L396      AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:03:59,947 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:03:59,947 INFO  L85        PathProgramCache]: Analyzing trace with hash -921302633, now seen corresponding path program 1 times
[2024-12-02 15:03:59,947 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:03:59,947 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913697049]
[2024-12-02 15:03:59,947 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:03:59,947 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:03:59,962 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,018 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:04:00,018 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:04:00,018 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913697049]
[2024-12-02 15:04:00,018 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1913697049] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:04:00,019 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:04:00,019 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 15:04:00,019 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140701511]
[2024-12-02 15:04:00,019 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:04:00,019 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 15:04:00,019 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:04:00,020 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 15:04:00,020 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:04:00,020 INFO  L87              Difference]: Start difference. First operand 336 states and 435 transitions. Second operand  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2)
[2024-12-02 15:04:00,065 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:04:00,066 INFO  L93              Difference]: Finished difference Result 677 states and 895 transitions.
[2024-12-02 15:04:00,066 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 15:04:00,067 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41
[2024-12-02 15:04:00,067 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:04:00,069 INFO  L225             Difference]: With dead ends: 677
[2024-12-02 15:04:00,069 INFO  L226             Difference]: Without dead ends: 348
[2024-12-02 15:04:00,070 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:04:00,071 INFO  L435           NwaCegarLoop]: 85 mSDtfsCounter, 0 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:04:00,071 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 334 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:04:00,072 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 348 states.
[2024-12-02 15:04:00,095 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 348.
[2024-12-02 15:04:00,096 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 348 states, 269 states have (on average 1.2899628252788105) internal successors, (347), 289 states have internal predecessors, (347), 41 states have call successors, (41), 39 states have call predecessors, (41), 37 states have return successors, (59), 36 states have call predecessors, (59), 41 states have call successors, (59)
[2024-12-02 15:04:00,099 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 447 transitions.
[2024-12-02 15:04:00,100 INFO  L78                 Accepts]: Start accepts. Automaton has 348 states and 447 transitions. Word has length 41
[2024-12-02 15:04:00,100 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:04:00,100 INFO  L471      AbstractCegarLoop]: Abstraction has 348 states and 447 transitions.
[2024-12-02 15:04:00,100 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2)
[2024-12-02 15:04:00,101 INFO  L276                IsEmpty]: Start isEmpty. Operand 348 states and 447 transitions.
[2024-12-02 15:04:00,102 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 42
[2024-12-02 15:04:00,102 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:04:00,102 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:00,102 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6
[2024-12-02 15:04:00,102 INFO  L396      AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:04:00,102 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:04:00,103 INFO  L85        PathProgramCache]: Analyzing trace with hash -1932419883, now seen corresponding path program 1 times
[2024-12-02 15:04:00,103 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:04:00,103 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1552641080]
[2024-12-02 15:04:00,103 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:04:00,103 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:04:00,115 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,178 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:04:00,178 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:04:00,178 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1552641080]
[2024-12-02 15:04:00,179 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1552641080] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:04:00,179 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:04:00,179 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 15:04:00,179 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009189433]
[2024-12-02 15:04:00,179 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:04:00,179 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 15:04:00,179 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:04:00,180 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 15:04:00,180 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:04:00,180 INFO  L87              Difference]: Start difference. First operand 348 states and 447 transitions. Second operand  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2)
[2024-12-02 15:04:00,247 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:04:00,247 INFO  L93              Difference]: Finished difference Result 634 states and 832 transitions.
[2024-12-02 15:04:00,247 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. 
[2024-12-02 15:04:00,248 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41
[2024-12-02 15:04:00,248 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:04:00,250 INFO  L225             Difference]: With dead ends: 634
[2024-12-02 15:04:00,250 INFO  L226             Difference]: Without dead ends: 293
[2024-12-02 15:04:00,251 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 15:04:00,252 INFO  L435           NwaCegarLoop]: 95 mSDtfsCounter, 70 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:04:00,252 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 355 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:04:00,253 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 293 states.
[2024-12-02 15:04:00,271 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 287.
[2024-12-02 15:04:00,272 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 287 states, 222 states have (on average 1.2747747747747749) internal successors, (283), 239 states have internal predecessors, (283), 34 states have call successors, (34), 32 states have call predecessors, (34), 30 states have return successors, (42), 29 states have call predecessors, (42), 34 states have call successors, (42)
[2024-12-02 15:04:00,274 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 359 transitions.
[2024-12-02 15:04:00,275 INFO  L78                 Accepts]: Start accepts. Automaton has 287 states and 359 transitions. Word has length 41
[2024-12-02 15:04:00,275 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:04:00,275 INFO  L471      AbstractCegarLoop]: Abstraction has 287 states and 359 transitions.
[2024-12-02 15:04:00,275 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2)
[2024-12-02 15:04:00,275 INFO  L276                IsEmpty]: Start isEmpty. Operand 287 states and 359 transitions.
[2024-12-02 15:04:00,276 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 42
[2024-12-02 15:04:00,276 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:04:00,276 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:00,277 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7
[2024-12-02 15:04:00,277 INFO  L396      AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:04:00,277 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:04:00,277 INFO  L85        PathProgramCache]: Analyzing trace with hash 1341479059, now seen corresponding path program 1 times
[2024-12-02 15:04:00,277 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:04:00,277 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [384504577]
[2024-12-02 15:04:00,277 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:04:00,278 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:04:00,291 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,369 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:04:00,370 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:04:00,370 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [384504577]
[2024-12-02 15:04:00,370 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [384504577] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:04:00,370 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:04:00,370 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 15:04:00,370 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74325534]
[2024-12-02 15:04:00,370 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:04:00,370 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 15:04:00,370 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:04:00,371 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 15:04:00,371 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 15:04:00,371 INFO  L87              Difference]: Start difference. First operand 287 states and 359 transitions. Second operand  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2)
[2024-12-02 15:04:00,460 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:04:00,460 INFO  L93              Difference]: Finished difference Result 633 states and 847 transitions.
[2024-12-02 15:04:00,460 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 15:04:00,461 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41
[2024-12-02 15:04:00,461 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:04:00,464 INFO  L225             Difference]: With dead ends: 633
[2024-12-02 15:04:00,464 INFO  L226             Difference]: Without dead ends: 434
[2024-12-02 15:04:00,465 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 15:04:00,465 INFO  L435           NwaCegarLoop]: 137 mSDtfsCounter, 49 mSDsluCounter, 344 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 481 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 15:04:00,466 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 481 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 15:04:00,466 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 434 states.
[2024-12-02 15:04:00,494 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 434 to 429.
[2024-12-02 15:04:00,495 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 429 states, 328 states have (on average 1.2591463414634145) internal successors, (413), 352 states have internal predecessors, (413), 51 states have call successors, (51), 49 states have call predecessors, (51), 49 states have return successors, (85), 48 states have call predecessors, (85), 51 states have call successors, (85)
[2024-12-02 15:04:00,498 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 429 states to 429 states and 549 transitions.
[2024-12-02 15:04:00,499 INFO  L78                 Accepts]: Start accepts. Automaton has 429 states and 549 transitions. Word has length 41
[2024-12-02 15:04:00,499 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:04:00,499 INFO  L471      AbstractCegarLoop]: Abstraction has 429 states and 549 transitions.
[2024-12-02 15:04:00,500 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2)
[2024-12-02 15:04:00,500 INFO  L276                IsEmpty]: Start isEmpty. Operand 429 states and 549 transitions.
[2024-12-02 15:04:00,501 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 64
[2024-12-02 15:04:00,502 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:04:00,502 INFO  L218           NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:00,502 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8
[2024-12-02 15:04:00,502 INFO  L396      AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:04:00,502 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:04:00,503 INFO  L85        PathProgramCache]: Analyzing trace with hash 183038111, now seen corresponding path program 1 times
[2024-12-02 15:04:00,503 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:04:00,503 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117986795]
[2024-12-02 15:04:00,503 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:04:00,503 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:04:00,516 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,549 INFO  L134       CoverageAnalysis]: Checked inductivity of 13 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:04:00,549 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:04:00,549 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117986795]
[2024-12-02 15:04:00,549 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117986795] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 15:04:00,549 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 15:04:00,549 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4
[2024-12-02 15:04:00,549 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658309153]
[2024-12-02 15:04:00,550 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 15:04:00,550 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-12-02 15:04:00,550 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:04:00,550 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-12-02 15:04:00,550 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-12-02 15:04:00,551 INFO  L87              Difference]: Start difference. First operand 429 states and 549 transitions. Second operand  has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3)
[2024-12-02 15:04:00,632 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:04:00,632 INFO  L93              Difference]: Finished difference Result 526 states and 674 transitions.
[2024-12-02 15:04:00,632 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-12-02 15:04:00,633 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 63
[2024-12-02 15:04:00,633 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:04:00,635 INFO  L225             Difference]: With dead ends: 526
[2024-12-02 15:04:00,635 INFO  L226             Difference]: Without dead ends: 210
[2024-12-02 15:04:00,636 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-12-02 15:04:00,636 INFO  L435           NwaCegarLoop]: 121 mSDtfsCounter, 110 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-12-02 15:04:00,637 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [110 Valid, 215 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-12-02 15:04:00,637 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 210 states.
[2024-12-02 15:04:00,653 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 210.
[2024-12-02 15:04:00,654 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 210 states, 161 states have (on average 1.2111801242236024) internal successors, (195), 172 states have internal predecessors, (195), 24 states have call successors, (24), 24 states have call predecessors, (24), 24 states have return successors, (41), 23 states have call predecessors, (41), 24 states have call successors, (41)
[2024-12-02 15:04:00,656 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 260 transitions.
[2024-12-02 15:04:00,656 INFO  L78                 Accepts]: Start accepts. Automaton has 210 states and 260 transitions. Word has length 63
[2024-12-02 15:04:00,656 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:04:00,656 INFO  L471      AbstractCegarLoop]: Abstraction has 210 states and 260 transitions.
[2024-12-02 15:04:00,657 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3)
[2024-12-02 15:04:00,657 INFO  L276                IsEmpty]: Start isEmpty. Operand 210 states and 260 transitions.
[2024-12-02 15:04:00,658 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 73
[2024-12-02 15:04:00,658 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:04:00,658 INFO  L218           NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:00,658 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9
[2024-12-02 15:04:00,658 INFO  L396      AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:04:00,658 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:04:00,659 INFO  L85        PathProgramCache]: Analyzing trace with hash 1227516324, now seen corresponding path program 1 times
[2024-12-02 15:04:00,659 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:04:00,659 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134300030]
[2024-12-02 15:04:00,659 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:04:00,659 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:04:00,677 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,817 INFO  L134       CoverageAnalysis]: Checked inductivity of 19 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked.
[2024-12-02 15:04:00,817 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 15:04:00,817 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134300030]
[2024-12-02 15:04:00,817 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134300030] provided 0 perfect and 1 imperfect interpolant sequences
[2024-12-02 15:04:00,817 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [231406812]
[2024-12-02 15:04:00,817 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 15:04:00,817 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true
[2024-12-02 15:04:00,817 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3
[2024-12-02 15:04:00,820 INFO  L229       MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null)
[2024-12-02 15:04:00,821 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process
[2024-12-02 15:04:00,915 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 15:04:00,917 INFO  L256         TraceCheckSpWp]: Trace formula consists of 258 conjuncts, 8 conjuncts are in the unsatisfiable core
[2024-12-02 15:04:00,923 INFO  L279         TraceCheckSpWp]: Computing forward predicates...
[2024-12-02 15:04:01,037 INFO  L134       CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 15:04:01,037 INFO  L312         TraceCheckSpWp]: Computing backward predicates...
[2024-12-02 15:04:01,170 INFO  L134       CoverageAnalysis]: Checked inductivity of 19 backedges. 11 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked.
[2024-12-02 15:04:01,170 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleZ3 [231406812] provided 0 perfect and 2 imperfect interpolant sequences
[2024-12-02 15:04:01,170 INFO  L185   FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences.
[2024-12-02 15:04:01,170 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 6
[2024-12-02 15:04:01,170 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2073181720]
[2024-12-02 15:04:01,171 INFO  L85    oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton
[2024-12-02 15:04:01,171 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-12-02 15:04:01,171 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 15:04:01,172 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-12-02 15:04:01,172 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30
[2024-12-02 15:04:01,172 INFO  L87              Difference]: Start difference. First operand 210 states and 260 transitions. Second operand  has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7)
[2024-12-02 15:04:01,307 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 15:04:01,307 INFO  L93              Difference]: Finished difference Result 488 states and 644 transitions.
[2024-12-02 15:04:01,308 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. 
[2024-12-02 15:04:01,308 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 72
[2024-12-02 15:04:01,308 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 15:04:01,310 INFO  L225             Difference]: With dead ends: 488
[2024-12-02 15:04:01,311 INFO  L226             Difference]: Without dead ends: 324
[2024-12-02 15:04:01,311 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 140 SyntacticMatches, 5 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90
[2024-12-02 15:04:01,312 INFO  L435           NwaCegarLoop]: 112 mSDtfsCounter, 79 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-12-02 15:04:01,312 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 441 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-12-02 15:04:01,313 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 324 states.
[2024-12-02 15:04:01,334 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 295.
[2024-12-02 15:04:01,335 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 295 states, 224 states have (on average 1.21875) internal successors, (273), 240 states have internal predecessors, (273), 35 states have call successors, (35), 35 states have call predecessors, (35), 35 states have return successors, (65), 31 states have call predecessors, (65), 35 states have call successors, (65)
[2024-12-02 15:04:01,337 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 295 states to 295 states and 373 transitions.
[2024-12-02 15:04:01,337 INFO  L78                 Accepts]: Start accepts. Automaton has 295 states and 373 transitions. Word has length 72
[2024-12-02 15:04:01,338 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 15:04:01,338 INFO  L471      AbstractCegarLoop]: Abstraction has 295 states and 373 transitions.
[2024-12-02 15:04:01,338 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7)
[2024-12-02 15:04:01,338 INFO  L276                IsEmpty]: Start isEmpty. Operand 295 states and 373 transitions.
[2024-12-02 15:04:01,340 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 104
[2024-12-02 15:04:01,340 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 15:04:01,340 INFO  L218           NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:01,349 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0
[2024-12-02 15:04:01,540 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true
[2024-12-02 15:04:01,541 INFO  L396      AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 15:04:01,541 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 15:04:01,541 INFO  L85        PathProgramCache]: Analyzing trace with hash -1463323021, now seen corresponding path program 2 times
[2024-12-02 15:04:01,541 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 15:04:01,541 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351849213]
[2024-12-02 15:04:01,541 INFO  L95    rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1
[2024-12-02 15:04:01,541 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 15:04:01,574 INFO  L229   tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s)
[2024-12-02 15:04:01,574 INFO  L230   tOrderPrioritization]: Conjunction of SSA is sat
[2024-12-02 15:04:01,575 INFO  L357             TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders.
[2024-12-02 15:04:01,591 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2024-12-02 15:04:01,618 INFO  L130   FreeRefinementEngine]: Strategy CAMEL found a feasible trace
[2024-12-02 15:04:01,618 INFO  L340         BasicCegarLoop]: Counterexample is feasible
[2024-12-02 15:04:01,619 INFO  L782   garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2024-12-02 15:04:01,620 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11
[2024-12-02 15:04:01,623 INFO  L422         BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 15:04:01,674 INFO  L170   ceAbstractionStarter]: Computing trace abstraction results
[2024-12-02 15:04:01,676 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 03:04:01 BoogieIcfgContainer
[2024-12-02 15:04:01,676 INFO  L131        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2024-12-02 15:04:01,677 INFO  L112        PluginConnector]: ------------------------Witness Printer----------------------------
[2024-12-02 15:04:01,677 INFO  L270        PluginConnector]: Initializing Witness Printer...
[2024-12-02 15:04:01,677 INFO  L274        PluginConnector]: Witness Printer initialized
[2024-12-02 15:04:01,678 INFO  L184        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 03:03:58" (3/4) ...
[2024-12-02 15:04:01,678 INFO  L140         WitnessPrinter]: Generating witness for reachability counterexample
[2024-12-02 15:04:01,753 INFO  L129   tionWitnessGenerator]: Generated YAML witness of length 93.
[2024-12-02 15:04:01,840 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml
[2024-12-02 15:04:01,840 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/witness.yml
[2024-12-02 15:04:01,840 INFO  L131        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2024-12-02 15:04:01,841 INFO  L158              Benchmark]: Toolchain (without parser) took 3962.20ms. Allocated memory was 117.4MB in the beginning and 142.6MB in the end (delta: 25.2MB). Free memory was 91.9MB in the beginning and 89.0MB in the end (delta: 2.9MB). Peak memory consumption was 31.8MB. Max. memory is 16.1GB.
[2024-12-02 15:04:01,841 INFO  L158              Benchmark]: CDTParser took 0.31ms. Allocated memory is still 117.4MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB.
[2024-12-02 15:04:01,842 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 342.47ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 73.2MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 15:04:01,842 INFO  L158              Benchmark]: Boogie Procedure Inliner took 34.29ms. Allocated memory is still 117.4MB. Free memory was 73.2MB in the beginning and 71.3MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
[2024-12-02 15:04:01,842 INFO  L158              Benchmark]: Boogie Preprocessor took 35.43ms. Allocated memory is still 117.4MB. Free memory was 71.3MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB.
[2024-12-02 15:04:01,843 INFO  L158              Benchmark]: RCFGBuilder took 346.64ms. Allocated memory is still 117.4MB. Free memory was 69.5MB in the beginning and 53.3MB in the end (delta: 16.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 15:04:01,843 INFO  L158              Benchmark]: TraceAbstraction took 3033.90ms. Allocated memory was 117.4MB in the beginning and 142.6MB in the end (delta: 25.2MB). Free memory was 52.7MB in the beginning and 101.4MB in the end (delta: -48.7MB). There was no memory consumed. Max. memory is 16.1GB.
[2024-12-02 15:04:01,843 INFO  L158              Benchmark]: Witness Printer took 163.57ms. Allocated memory is still 142.6MB. Free memory was 101.4MB in the beginning and 89.0MB in the end (delta: 12.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 15:04:01,845 INFO  L338   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.31ms. Allocated memory is still 117.4MB. Free memory is still 72.2MB. There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 342.47ms. Allocated memory is still 117.4MB. Free memory was 91.6MB in the beginning and 73.2MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 34.29ms. Allocated memory is still 117.4MB. Free memory was 73.2MB in the beginning and 71.3MB in the end (delta: 1.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 35.43ms. Allocated memory is still 117.4MB. Free memory was 71.3MB in the beginning and 69.5MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB.
 * RCFGBuilder took 346.64ms. Allocated memory is still 117.4MB. Free memory was 69.5MB in the beginning and 53.3MB in the end (delta: 16.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 3033.90ms. Allocated memory was 117.4MB in the beginning and 142.6MB in the end (delta: 25.2MB). Free memory was 52.7MB in the beginning and 101.4MB in the end (delta: -48.7MB). There was no memory consumed. Max. memory is 16.1GB.
 * Witness Printer took 163.57ms. Allocated memory is still 142.6MB. Free memory was 101.4MB in the beginning and 89.0MB in the end (delta: 12.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator:
  - GenericResultAtLocation [Line: 49]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49]
  - GenericResultAtLocation [Line: 87]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [87]
  - GenericResultAtLocation [Line: 453]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [453]
  - GenericResultAtLocation [Line: 525]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [525]
  - GenericResultAtLocation [Line: 727]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [727]
  - GenericResultAtLocation [Line: 736]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [736]
  - GenericResultAtLocation [Line: 831]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [831]
  - GenericResultAtLocation [Line: 927]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [927]
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - CounterExampleResult [Line: 732]: a call to reach_error is reachable
    a call to reach_error is reachable
We found a FailurePath: 
[L257]              static struct __ACC__ERR *head  =    (struct __ACC__ERR *)0;
[L534]              int pumpRunning  =    0;
[L535]              int systemActive  =    1;
[L738]              int waterLevel  =    1;
[L739]              int methaneLevelCritical  =    0;
[L832]              int cleanupTimeShifts  =    4;
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L905]              int retValue_acc ;
[L906]              int tmp ;
[L910]  FCALL       select_helpers()
[L911]  FCALL       select_features()
[L912]  CALL, EXPR  valid_product()
[L79]               int retValue_acc ;
[L82]               retValue_acc = 1
[L83]               return (retValue_acc);
        VAL         [\result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L912]  RET, EXPR   valid_product()
[L912]              tmp = valid_product()
[L914]  COND TRUE   \read(tmp)
[L916]  FCALL       setup()
[L917]  CALL        runTest()
[L899]  CALL        test()
[L460]              int splverifierCounter ;
[L461]              int tmp ;
[L462]              int tmp___0 ;
[L463]              int tmp___1 ;
[L464]              int tmp___2 ;
[L467]              splverifierCounter = 0
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L471]  COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L477]              tmp = __VERIFIER_nondet_int()
[L479]  COND TRUE   \read(tmp)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L481]  CALL        waterRise()
        VAL         [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L756]  COND TRUE   waterLevel < 2
[L757]              waterLevel = waterLevel + 1
        VAL         [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L481]  RET         waterRise()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L487]              tmp___0 = __VERIFIER_nondet_int()
[L489]  COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L497]              tmp___2 = __VERIFIER_nondet_int()
[L499]  COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L514]  CALL        timeShift()
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L542]  COND FALSE  !(\read(pumpRunning))
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L549]  COND TRUE   \read(systemActive)
[L551]  CALL        processEnvironment()
[L597]              int tmp ;
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L600]  COND FALSE  !(\read(pumpRunning))
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L615]  CALL        processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L571]              int tmp ;
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L574]  COND TRUE   ! pumpRunning
[L576]  CALL, EXPR  isHighWaterLevel()
[L694]              int retValue_acc ;
[L695]              int tmp ;
[L696]              int tmp___0 ;
[L700]  CALL, EXPR  isHighWaterSensorDry()
[L818]              int retValue_acc ;
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L821]  COND FALSE  !(waterLevel < 2)
[L825]              retValue_acc = 0
[L826]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L700]  RET, EXPR   isHighWaterSensorDry()
[L700]              tmp = isHighWaterSensorDry()
[L702]  COND FALSE  !(\read(tmp))
[L705]              tmp___0 = 1
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, tmp___0=1, waterLevel=2]
[L707]              retValue_acc = tmp___0
[L708]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L576]  RET, EXPR   isHighWaterLevel()
[L576]              tmp = isHighWaterLevel()
[L578]  COND TRUE   \read(tmp)
[L580]  CALL        activatePump()
[L625]              pumpRunning = 1
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L580]  RET         activatePump()
[L615]  RET         processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L551]  RET         processEnvironment()
[L557]  CALL        __utac_acc__Specification4_spec__1()
[L929]              int tmp ;
[L930]              int tmp___0 ;
[L934]  CALL, EXPR  getWaterLevel()
[L809]              int retValue_acc ;
[L812]              retValue_acc = waterLevel
[L813]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L934]  RET, EXPR   getWaterLevel()
[L934]              tmp = getWaterLevel()
[L936]  COND FALSE  !(tmp == 0)
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L557]  RET         __utac_acc__Specification4_spec__1()
[L514]  RET         timeShift()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L471]  COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L477]              tmp = __VERIFIER_nondet_int()
[L479]  COND FALSE  !(\read(tmp))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L487]              tmp___0 = __VERIFIER_nondet_int()
[L489]  COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L497]              tmp___2 = __VERIFIER_nondet_int()
[L499]  COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L514]  CALL        timeShift()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L542]  COND TRUE   \read(pumpRunning)
[L544]  CALL        lowerWaterLevel()
[L744]  COND TRUE   waterLevel > 0
[L745]              waterLevel = waterLevel - 1
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L544]  RET         lowerWaterLevel()
[L549]  COND TRUE   \read(systemActive)
[L551]  CALL        processEnvironment()
[L597]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L600]  COND TRUE   \read(pumpRunning)
[L602]  CALL, EXPR  isMethaneAlarm()
[L638]              int retValue_acc ;
[L642]  CALL, EXPR  isMethaneLevelCritical()
[L777]              int retValue_acc ;
[L780]              retValue_acc = methaneLevelCritical
[L781]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L642]  RET, EXPR   isMethaneLevelCritical()
[L642]              retValue_acc = isMethaneLevelCritical()
[L644]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L602]  RET, EXPR   isMethaneAlarm()
[L602]              tmp = isMethaneAlarm()
[L604]  COND FALSE  !(\read(tmp))
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L610]  CALL        processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L571]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L574]  COND FALSE  !(! pumpRunning)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L589]  FCALL       processEnvironment__wrappee__base()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L610]  RET         processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L551]  RET         processEnvironment()
[L557]  CALL        __utac_acc__Specification4_spec__1()
[L929]              int tmp ;
[L930]              int tmp___0 ;
[L934]  CALL, EXPR  getWaterLevel()
[L809]              int retValue_acc ;
[L812]              retValue_acc = waterLevel
[L813]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L934]  RET, EXPR   getWaterLevel()
[L934]              tmp = getWaterLevel()
[L936]  COND FALSE  !(tmp == 0)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L557]  RET         __utac_acc__Specification4_spec__1()
[L514]  RET         timeShift()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L471]  COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L477]              tmp = __VERIFIER_nondet_int()
[L479]  COND FALSE  !(\read(tmp))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L487]              tmp___0 = __VERIFIER_nondet_int()
[L489]  COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L497]              tmp___2 = __VERIFIER_nondet_int()
[L499]  COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L514]  CALL        timeShift()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L542]  COND TRUE   \read(pumpRunning)
[L544]  CALL        lowerWaterLevel()
[L744]  COND TRUE   waterLevel > 0
[L745]              waterLevel = waterLevel - 1
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L544]  RET         lowerWaterLevel()
[L549]  COND TRUE   \read(systemActive)
[L551]  CALL        processEnvironment()
[L597]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L600]  COND TRUE   \read(pumpRunning)
[L602]  CALL, EXPR  isMethaneAlarm()
[L638]              int retValue_acc ;
[L642]  CALL, EXPR  isMethaneLevelCritical()
[L777]              int retValue_acc ;
[L780]              retValue_acc = methaneLevelCritical
[L781]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L642]  RET, EXPR   isMethaneLevelCritical()
[L642]              retValue_acc = isMethaneLevelCritical()
[L644]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L602]  RET, EXPR   isMethaneAlarm()
[L602]              tmp = isMethaneAlarm()
[L604]  COND FALSE  !(\read(tmp))
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L610]  CALL        processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L571]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L574]  COND FALSE  !(! pumpRunning)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L589]  FCALL       processEnvironment__wrappee__base()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L610]  RET         processEnvironment__wrappee__highWaterSensor()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L551]  RET         processEnvironment()
[L557]  CALL        __utac_acc__Specification4_spec__1()
[L929]              int tmp ;
[L930]              int tmp___0 ;
[L934]  CALL, EXPR  getWaterLevel()
[L809]              int retValue_acc ;
[L812]              retValue_acc = waterLevel
[L813]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L934]  RET, EXPR   getWaterLevel()
[L934]              tmp = getWaterLevel()
[L936]  COND TRUE   tmp == 0
[L938]  CALL, EXPR  isPumpRunning()
[L649]              int retValue_acc ;
[L652]              retValue_acc = pumpRunning
[L653]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L938]  RET, EXPR   isPumpRunning()
[L938]              tmp___0 = isPumpRunning()
[L940]  COND TRUE   \read(tmp___0)
[L942]  CALL        __automaton_fail()
[L732]              reach_error()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]

  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 8 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 546 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 542 mSDsluCounter, 3030 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1932 mSDsCounter, 33 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 231 IncrementalHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 33 mSolverCounterUnsat, 1098 mSDtfsCounter, 231 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 203 GetRequests, 162 SyntacticMatches, 5 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=429occurred in iteration=9, InterpolantAutomatonStates: 50, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 52 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 581 NumberOfCodeBlocks, 581 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 537 ConstructedInterpolants, 0 QuantifiedInterpolants, 1036 SizeOfPredicates, 2 NumberOfNonLiveVariables, 258 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 52/70 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available
RESULT: Ultimate proved your program to be incorrect!
[2024-12-02 15:04:01,864 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e35fa746-7ad7-401e-bb42-25d834593f0f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Writing human readable error path to file UltimateCounterExample.errorpath
Result:
FALSE