./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c --full-output --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version d790fecc
Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) )

 --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6014a53bc4531229002927c7dae6ceb41eaf1bcae6bbbe475b6c1299f7673d0b
--- Real Ultimate output ---
This is Ultimate 0.3.0-dev-d790fec
[2024-12-02 14:40:14,292 INFO  L188        SettingsManager]: Resetting all preferences to default values...
[2024-12-02 14:40:14,342 INFO  L114        SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/config/svcomp-Reach-32bit-Automizer_Default.epf
[2024-12-02 14:40:14,346 WARN  L101        SettingsManager]: Preference file contains the following unknown settings:
[2024-12-02 14:40:14,346 WARN  L103        SettingsManager]:   * de.uni_freiburg.informatik.ultimate.core.Log level for class
[2024-12-02 14:40:14,364 INFO  L130        SettingsManager]: Preferences different from defaults after loading the file:
[2024-12-02 14:40:14,365 INFO  L151        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2024-12-02 14:40:14,365 INFO  L153        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2024-12-02 14:40:14,365 INFO  L151        SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults:
[2024-12-02 14:40:14,366 INFO  L153        SettingsManager]:  * Use memory slicer=true
[2024-12-02 14:40:14,366 INFO  L151        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2024-12-02 14:40:14,366 INFO  L153        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2024-12-02 14:40:14,366 INFO  L151        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2024-12-02 14:40:14,366 INFO  L153        SettingsManager]:  * Create parallel compositions if possible=false
[2024-12-02 14:40:14,366 INFO  L153        SettingsManager]:  * Use SBE=true
[2024-12-02 14:40:14,366 INFO  L151        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * sizeof long=4
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Overapproximate operations on floating types=true
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * sizeof POINTER=4
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Check division by zero=IGNORE
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * sizeof long double=12
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Check if freed pointer was valid=false
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR
[2024-12-02 14:40:14,367 INFO  L153        SettingsManager]:  * Use constant arrays=true
[2024-12-02 14:40:14,368 INFO  L151        SettingsManager]: Preferences of IcfgBuilder differ from their defaults:
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Only consider context switches at boundaries of atomic blocks=true
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 14:40:14,368 INFO  L151        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Only consider context switches at boundaries of atomic blocks=true
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2024-12-02 14:40:14,368 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 14:40:14,369 INFO  L151        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Compute procedure contracts=false
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopHeads
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Trace refinement strategy=CAMEL
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Apply one-shot large block encoding in concurrent analysis=false
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Order on configurations for Petri net unfoldings=DBO
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2024-12-02 14:40:14,369 INFO  L153        SettingsManager]:  * Looper check in Petri net analysis=SEMANTIC
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) )


Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit
Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6014a53bc4531229002927c7dae6ceb41eaf1bcae6bbbe475b6c1299f7673d0b
[2024-12-02 14:40:14,563 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2024-12-02 14:40:14,570 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2024-12-02 14:40:14,572 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2024-12-02 14:40:14,573 INFO  L270        PluginConnector]: Initializing CDTParser...
[2024-12-02 14:40:14,573 INFO  L274        PluginConnector]: CDTParser initialized
[2024-12-02 14:40:14,574 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/../../sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c
[2024-12-02 14:40:17,211 INFO  L533              CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/data/2fc7c11c5/36928ee32e47401b8b345ab770139bad/FLAGaff6a313c
[2024-12-02 14:40:17,421 INFO  L384              CDTParser]: Found 1 translation units.
[2024-12-02 14:40:17,422 INFO  L180              CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c
[2024-12-02 14:40:17,434 INFO  L427              CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/data/2fc7c11c5/36928ee32e47401b8b345ab770139bad/FLAGaff6a313c
[2024-12-02 14:40:17,756 INFO  L435              CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/data/2fc7c11c5/36928ee32e47401b8b345ab770139bad
[2024-12-02 14:40:17,758 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2024-12-02 14:40:17,759 INFO  L133        ToolchainWalker]: Walking toolchain with 6 elements.
[2024-12-02 14:40:17,760 INFO  L112        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2024-12-02 14:40:17,760 INFO  L270        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2024-12-02 14:40:17,763 INFO  L274        PluginConnector]: CACSL2BoogieTranslator initialized
[2024-12-02 14:40:17,764 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 02:40:17" (1/1) ...
[2024-12-02 14:40:17,764 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6c446b06 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:17, skipping insertion in model container
[2024-12-02 14:40:17,764 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 02:40:17" (1/1) ...
[2024-12-02 14:40:17,790 INFO  L175         MainTranslator]: Built tables and reachable declarations
[2024-12-02 14:40:17,935 WARN  L250   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c[5104,5117]
[2024-12-02 14:40:17,998 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-12-02 14:40:18,008 INFO  L200         MainTranslator]: Completed pre-run
[2024-12-02 14:40:18,016 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [315]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [324]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [423]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [518]
[2024-12-02 14:40:18,017 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [553]
[2024-12-02 14:40:18,018 WARN  L75    lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [919]
[2024-12-02 14:40:18,030 WARN  L250   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/sv-benchmarks/c/product-lines/minepump_spec4_product43.cil.c[5104,5117]
[2024-12-02 14:40:18,065 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-12-02 14:40:18,082 INFO  L204         MainTranslator]: Completed translation
[2024-12-02 14:40:18,083 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18 WrapperNode
[2024-12-02 14:40:18,083 INFO  L131        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2024-12-02 14:40:18,084 INFO  L112        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2024-12-02 14:40:18,084 INFO  L270        PluginConnector]: Initializing Boogie Procedure Inliner...
[2024-12-02 14:40:18,084 INFO  L274        PluginConnector]: Boogie Procedure Inliner initialized
[2024-12-02 14:40:18,090 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,100 INFO  L184        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,119 INFO  L138                Inliner]: procedures = 54, calls = 97, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 199
[2024-12-02 14:40:18,119 INFO  L131        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2024-12-02 14:40:18,120 INFO  L112        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2024-12-02 14:40:18,120 INFO  L270        PluginConnector]: Initializing Boogie Preprocessor...
[2024-12-02 14:40:18,120 INFO  L274        PluginConnector]: Boogie Preprocessor initialized
[2024-12-02 14:40:18,128 INFO  L184        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,129 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,130 INFO  L184        PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,142 INFO  L175           MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0].
[2024-12-02 14:40:18,142 INFO  L184        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,142 INFO  L184        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,147 INFO  L184        PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,147 INFO  L184        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,151 INFO  L184        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,152 INFO  L184        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,153 INFO  L184        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,155 INFO  L131        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2024-12-02 14:40:18,155 INFO  L112        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2024-12-02 14:40:18,155 INFO  L270        PluginConnector]: Initializing RCFGBuilder...
[2024-12-02 14:40:18,155 INFO  L274        PluginConnector]: RCFGBuilder initialized
[2024-12-02 14:40:18,156 INFO  L184        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (1/1) ...
[2024-12-02 14:40:18,161 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-12-02 14:40:18,173 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3
[2024-12-02 14:40:18,184 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null)
[2024-12-02 14:40:18,187 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process
[2024-12-02 14:40:18,211 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2024-12-02 14:40:18,211 INFO  L130     BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base
[2024-12-02 14:40:18,211 INFO  L138     BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base
[2024-12-02 14:40:18,211 INFO  L130     BoogieDeclarations]: Found specification of procedure cleanup
[2024-12-02 14:40:18,211 INFO  L138     BoogieDeclarations]: Found implementation of procedure cleanup
[2024-12-02 14:40:18,211 INFO  L130     BoogieDeclarations]: Found specification of procedure timeShift
[2024-12-02 14:40:18,211 INFO  L138     BoogieDeclarations]: Found implementation of procedure timeShift
[2024-12-02 14:40:18,211 INFO  L130     BoogieDeclarations]: Found specification of procedure waterRise
[2024-12-02 14:40:18,212 INFO  L138     BoogieDeclarations]: Found implementation of procedure waterRise
[2024-12-02 14:40:18,212 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int#0
[2024-12-02 14:40:18,212 INFO  L130     BoogieDeclarations]: Found specification of procedure changeMethaneLevel
[2024-12-02 14:40:18,212 INFO  L138     BoogieDeclarations]: Found implementation of procedure changeMethaneLevel
[2024-12-02 14:40:18,212 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2024-12-02 14:40:18,212 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2024-12-02 14:40:18,272 INFO  L234             CfgBuilder]: Building ICFG
[2024-12-02 14:40:18,274 INFO  L260             CfgBuilder]: Building CFG for each procedure with an implementation
[2024-12-02 14:40:18,462 INFO  L?                        ?]: Removed 43 outVars from TransFormulas that were not future-live.
[2024-12-02 14:40:18,462 INFO  L283             CfgBuilder]: Performing block encoding
[2024-12-02 14:40:18,471 INFO  L307             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2024-12-02 14:40:18,472 INFO  L312             CfgBuilder]: Removed 4 assume(true) statements.
[2024-12-02 14:40:18,472 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:40:18 BoogieIcfgContainer
[2024-12-02 14:40:18,472 INFO  L131        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2024-12-02 14:40:18,474 INFO  L112        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2024-12-02 14:40:18,474 INFO  L270        PluginConnector]: Initializing TraceAbstraction...
[2024-12-02 14:40:18,479 INFO  L274        PluginConnector]: TraceAbstraction initialized
[2024-12-02 14:40:18,479 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 02:40:17" (1/3) ...
[2024-12-02 14:40:18,480 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58e972e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 02:40:18, skipping insertion in model container
[2024-12-02 14:40:18,480 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 02:40:18" (2/3) ...
[2024-12-02 14:40:18,480 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58e972e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 02:40:18, skipping insertion in model container
[2024-12-02 14:40:18,480 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:40:18" (3/3) ...
[2024-12-02 14:40:18,481 INFO  L128   eAbstractionObserver]: Analyzing ICFG minepump_spec4_product43.cil.c
[2024-12-02 14:40:18,497 INFO  L216   ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2024-12-02 14:40:18,498 INFO  L151   ceAbstractionStarter]: Applying trace abstraction to ICFG minepump_spec4_product43.cil.c that has 6 procedures, 76 locations, 1 initial locations, 2 loop locations, and 1 error locations.
[2024-12-02 14:40:18,550 INFO  L332      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2024-12-02 14:40:18,562 INFO  L333      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5811909c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms]
[2024-12-02 14:40:18,562 INFO  L334      AbstractCegarLoop]: Starting to check reachability of 1 error locations.
[2024-12-02 14:40:18,566 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 76 states, 61 states have (on average 1.4098360655737705) internal successors, (86), 67 states have internal predecessors, (86), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8)
[2024-12-02 14:40:18,572 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2024-12-02 14:40:18,572 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:18,573 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:18,573 INFO  L396      AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:18,578 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:18,578 INFO  L85        PathProgramCache]: Analyzing trace with hash 1991468330, now seen corresponding path program 1 times
[2024-12-02 14:40:18,583 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:18,583 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521309004]
[2024-12-02 14:40:18,584 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:18,584 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:18,661 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:18,712 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:18,712 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:18,712 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521309004]
[2024-12-02 14:40:18,713 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521309004] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:18,713 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:18,713 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-12-02 14:40:18,715 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [257323681]
[2024-12-02 14:40:18,715 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:18,719 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 2 states
[2024-12-02 14:40:18,720 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:18,736 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants.
[2024-12-02 14:40:18,737 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2024-12-02 14:40:18,739 INFO  L87              Difference]: Start difference. First operand  has 76 states, 61 states have (on average 1.4098360655737705) internal successors, (86), 67 states have internal predecessors, (86), 8 states have call successors, (8), 5 states have call predecessors, (8), 5 states have return successors, (8), 7 states have call predecessors, (8), 8 states have call successors, (8) Second operand  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:18,767 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:18,768 INFO  L93              Difference]: Finished difference Result 144 states and 199 transitions.
[2024-12-02 14:40:18,768 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. 
[2024-12-02 14:40:18,769 INFO  L78                 Accepts]: Start accepts. Automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2024-12-02 14:40:18,769 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:18,775 INFO  L225             Difference]: With dead ends: 144
[2024-12-02 14:40:18,775 INFO  L226             Difference]: Without dead ends: 67
[2024-12-02 14:40:18,778 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2
[2024-12-02 14:40:18,779 INFO  L435           NwaCegarLoop]: 96 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:18,780 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:18,789 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 67 states.
[2024-12-02 14:40:18,802 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67.
[2024-12-02 14:40:18,803 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 67 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 59 states have internal predecessors, (72), 8 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7)
[2024-12-02 14:40:18,805 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 87 transitions.
[2024-12-02 14:40:18,807 INFO  L78                 Accepts]: Start accepts. Automaton has 67 states and 87 transitions. Word has length 19
[2024-12-02 14:40:18,807 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:18,807 INFO  L471      AbstractCegarLoop]: Abstraction has 67 states and 87 transitions.
[2024-12-02 14:40:18,807 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:18,807 INFO  L276                IsEmpty]: Start isEmpty. Operand 67 states and 87 transitions.
[2024-12-02 14:40:18,808 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 20
[2024-12-02 14:40:18,809 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:18,809 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:18,809 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2024-12-02 14:40:18,809 INFO  L396      AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:18,809 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:18,810 INFO  L85        PathProgramCache]: Analyzing trace with hash 735878709, now seen corresponding path program 1 times
[2024-12-02 14:40:18,810 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:18,810 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1881835763]
[2024-12-02 14:40:18,810 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:18,810 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:18,830 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:18,894 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:18,894 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:18,894 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1881835763]
[2024-12-02 14:40:18,895 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1881835763] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:18,895 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:18,895 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-12-02 14:40:18,895 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990563914]
[2024-12-02 14:40:18,895 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:18,896 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-12-02 14:40:18,896 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:18,897 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-12-02 14:40:18,897 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 14:40:18,897 INFO  L87              Difference]: Start difference. First operand 67 states and 87 transitions. Second operand  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:18,910 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:18,910 INFO  L93              Difference]: Finished difference Result 98 states and 127 transitions.
[2024-12-02 14:40:18,911 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-12-02 14:40:18,911 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19
[2024-12-02 14:40:18,911 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:18,912 INFO  L225             Difference]: With dead ends: 98
[2024-12-02 14:40:18,912 INFO  L226             Difference]: Without dead ends: 59
[2024-12-02 14:40:18,913 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 14:40:18,914 INFO  L435           NwaCegarLoop]: 75 mSDtfsCounter, 17 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:18,914 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 130 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:18,915 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 59 states.
[2024-12-02 14:40:18,920 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59.
[2024-12-02 14:40:18,921 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 59 states, 49 states have (on average 1.346938775510204) internal successors, (66), 54 states have internal predecessors, (66), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5)
[2024-12-02 14:40:18,922 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 76 transitions.
[2024-12-02 14:40:18,922 INFO  L78                 Accepts]: Start accepts. Automaton has 59 states and 76 transitions. Word has length 19
[2024-12-02 14:40:18,922 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:18,922 INFO  L471      AbstractCegarLoop]: Abstraction has 59 states and 76 transitions.
[2024-12-02 14:40:18,922 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:18,922 INFO  L276                IsEmpty]: Start isEmpty. Operand 59 states and 76 transitions.
[2024-12-02 14:40:18,923 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 24
[2024-12-02 14:40:18,923 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:18,923 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:18,923 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2024-12-02 14:40:18,924 INFO  L396      AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:18,924 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:18,924 INFO  L85        PathProgramCache]: Analyzing trace with hash 1937804441, now seen corresponding path program 1 times
[2024-12-02 14:40:18,924 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:18,924 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816806578]
[2024-12-02 14:40:18,924 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:18,925 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:18,943 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,047 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,047 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,047 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816806578]
[2024-12-02 14:40:19,048 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816806578] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,048 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,048 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 14:40:19,048 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738274203]
[2024-12-02 14:40:19,048 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,048 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-12-02 14:40:19,048 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,049 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-12-02 14:40:19,049 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30
[2024-12-02 14:40:19,049 INFO  L87              Difference]: Start difference. First operand 59 states and 76 transitions. Second operand  has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:19,190 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,190 INFO  L93              Difference]: Finished difference Result 196 states and 261 transitions.
[2024-12-02 14:40:19,191 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2024-12-02 14:40:19,191 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23
[2024-12-02 14:40:19,191 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,192 INFO  L225             Difference]: With dead ends: 196
[2024-12-02 14:40:19,192 INFO  L226             Difference]: Without dead ends: 144
[2024-12-02 14:40:19,193 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56
[2024-12-02 14:40:19,194 INFO  L435           NwaCegarLoop]: 84 mSDtfsCounter, 176 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,194 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 322 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-12-02 14:40:19,195 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 144 states.
[2024-12-02 14:40:19,213 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 134.
[2024-12-02 14:40:19,213 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 134 states, 109 states have (on average 1.385321100917431) internal successors, (151), 120 states have internal predecessors, (151), 13 states have call successors, (13), 11 states have call predecessors, (13), 11 states have return successors, (14), 11 states have call predecessors, (14), 13 states have call successors, (14)
[2024-12-02 14:40:19,215 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 178 transitions.
[2024-12-02 14:40:19,215 INFO  L78                 Accepts]: Start accepts. Automaton has 134 states and 178 transitions. Word has length 23
[2024-12-02 14:40:19,215 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,215 INFO  L471      AbstractCegarLoop]: Abstraction has 134 states and 178 transitions.
[2024-12-02 14:40:19,216 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 3.6666666666666665) internal successors, (22), 5 states have internal predecessors, (22), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:19,216 INFO  L276                IsEmpty]: Start isEmpty. Operand 134 states and 178 transitions.
[2024-12-02 14:40:19,217 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 29
[2024-12-02 14:40:19,217 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,217 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,217 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2024-12-02 14:40:19,217 INFO  L396      AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,217 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,218 INFO  L85        PathProgramCache]: Analyzing trace with hash 754588324, now seen corresponding path program 1 times
[2024-12-02 14:40:19,218 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,218 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988568172]
[2024-12-02 14:40:19,218 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,218 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,230 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,257 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,257 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,257 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988568172]
[2024-12-02 14:40:19,257 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988568172] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,257 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,257 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-12-02 14:40:19,258 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814931491]
[2024-12-02 14:40:19,258 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,258 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-12-02 14:40:19,258 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,259 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-12-02 14:40:19,259 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 14:40:19,259 INFO  L87              Difference]: Start difference. First operand 134 states and 178 transitions. Second operand  has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,301 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,301 INFO  L93              Difference]: Finished difference Result 326 states and 442 transitions.
[2024-12-02 14:40:19,301 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-12-02 14:40:19,301 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28
[2024-12-02 14:40:19,302 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,303 INFO  L225             Difference]: With dead ends: 326
[2024-12-02 14:40:19,303 INFO  L226             Difference]: Without dead ends: 199
[2024-12-02 14:40:19,304 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-12-02 14:40:19,305 INFO  L435           NwaCegarLoop]: 72 mSDtfsCounter, 64 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,306 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 115 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:19,307 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 199 states.
[2024-12-02 14:40:19,326 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 197.
[2024-12-02 14:40:19,327 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 197 states, 158 states have (on average 1.3544303797468353) internal successors, (214), 173 states have internal predecessors, (214), 19 states have call successors, (19), 19 states have call predecessors, (19), 19 states have return successors, (25), 19 states have call predecessors, (25), 19 states have call successors, (25)
[2024-12-02 14:40:19,329 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 258 transitions.
[2024-12-02 14:40:19,329 INFO  L78                 Accepts]: Start accepts. Automaton has 197 states and 258 transitions. Word has length 28
[2024-12-02 14:40:19,330 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,330 INFO  L471      AbstractCegarLoop]: Abstraction has 197 states and 258 transitions.
[2024-12-02 14:40:19,330 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,330 INFO  L276                IsEmpty]: Start isEmpty. Operand 197 states and 258 transitions.
[2024-12-02 14:40:19,331 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 28
[2024-12-02 14:40:19,331 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,331 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,331 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2024-12-02 14:40:19,331 INFO  L396      AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,331 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,332 INFO  L85        PathProgramCache]: Analyzing trace with hash 1938436046, now seen corresponding path program 1 times
[2024-12-02 14:40:19,332 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,332 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180133209]
[2024-12-02 14:40:19,332 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,332 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,344 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,443 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,443 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,443 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180133209]
[2024-12-02 14:40:19,443 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180133209] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,444 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,444 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4
[2024-12-02 14:40:19,444 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1970919810]
[2024-12-02 14:40:19,444 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,444 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 14:40:19,444 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,445 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 14:40:19,445 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 14:40:19,445 INFO  L87              Difference]: Start difference. First operand 197 states and 258 transitions. Second operand  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:19,512 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,512 INFO  L93              Difference]: Finished difference Result 543 states and 745 transitions.
[2024-12-02 14:40:19,512 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 14:40:19,512 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27
[2024-12-02 14:40:19,513 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,515 INFO  L225             Difference]: With dead ends: 543
[2024-12-02 14:40:19,515 INFO  L226             Difference]: Without dead ends: 353
[2024-12-02 14:40:19,516 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 14:40:19,517 INFO  L435           NwaCegarLoop]: 70 mSDtfsCounter, 39 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 271 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,517 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 271 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:19,518 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 353 states.
[2024-12-02 14:40:19,549 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 353.
[2024-12-02 14:40:19,550 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 353 states, 285 states have (on average 1.3192982456140352) internal successors, (376), 307 states have internal predecessors, (376), 36 states have call successors, (36), 36 states have call predecessors, (36), 31 states have return successors, (52), 31 states have call predecessors, (52), 36 states have call successors, (52)
[2024-12-02 14:40:19,552 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 464 transitions.
[2024-12-02 14:40:19,553 INFO  L78                 Accepts]: Start accepts. Automaton has 353 states and 464 transitions. Word has length 27
[2024-12-02 14:40:19,553 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,553 INFO  L471      AbstractCegarLoop]: Abstraction has 353 states and 464 transitions.
[2024-12-02 14:40:19,553 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-12-02 14:40:19,553 INFO  L276                IsEmpty]: Start isEmpty. Operand 353 states and 464 transitions.
[2024-12-02 14:40:19,554 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2024-12-02 14:40:19,555 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,555 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,555 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4
[2024-12-02 14:40:19,555 INFO  L396      AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,555 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,556 INFO  L85        PathProgramCache]: Analyzing trace with hash 357797044, now seen corresponding path program 1 times
[2024-12-02 14:40:19,556 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,556 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1891894110]
[2024-12-02 14:40:19,556 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,556 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,567 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,611 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,611 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,611 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1891894110]
[2024-12-02 14:40:19,612 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1891894110] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,612 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,612 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 14:40:19,612 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922673740]
[2024-12-02 14:40:19,612 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,612 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 14:40:19,612 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,613 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 14:40:19,613 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 14:40:19,613 INFO  L87              Difference]: Start difference. First operand 353 states and 464 transitions. Second operand  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,671 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,671 INFO  L93              Difference]: Finished difference Result 355 states and 465 transitions.
[2024-12-02 14:40:19,671 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 14:40:19,672 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31
[2024-12-02 14:40:19,672 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,674 INFO  L225             Difference]: With dead ends: 355
[2024-12-02 14:40:19,674 INFO  L226             Difference]: Without dead ends: 353
[2024-12-02 14:40:19,675 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 14:40:19,675 INFO  L435           NwaCegarLoop]: 70 mSDtfsCounter, 60 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,676 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 250 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:19,677 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 353 states.
[2024-12-02 14:40:19,700 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 353.
[2024-12-02 14:40:19,700 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 353 states, 285 states have (on average 1.3087719298245615) internal successors, (373), 307 states have internal predecessors, (373), 36 states have call successors, (36), 36 states have call predecessors, (36), 31 states have return successors, (52), 31 states have call predecessors, (52), 36 states have call successors, (52)
[2024-12-02 14:40:19,702 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 461 transitions.
[2024-12-02 14:40:19,703 INFO  L78                 Accepts]: Start accepts. Automaton has 353 states and 461 transitions. Word has length 31
[2024-12-02 14:40:19,703 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,703 INFO  L471      AbstractCegarLoop]: Abstraction has 353 states and 461 transitions.
[2024-12-02 14:40:19,703 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,703 INFO  L276                IsEmpty]: Start isEmpty. Operand 353 states and 461 transitions.
[2024-12-02 14:40:19,705 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 41
[2024-12-02 14:40:19,705 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,705 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,705 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5
[2024-12-02 14:40:19,705 INFO  L396      AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,706 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,706 INFO  L85        PathProgramCache]: Analyzing trace with hash 486118089, now seen corresponding path program 1 times
[2024-12-02 14:40:19,706 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,706 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709767586]
[2024-12-02 14:40:19,706 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,706 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,719 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,762 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,762 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,762 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709767586]
[2024-12-02 14:40:19,762 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709767586] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,762 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,762 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 14:40:19,762 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705230187]
[2024-12-02 14:40:19,762 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,762 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 14:40:19,763 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,763 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 14:40:19,763 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 14:40:19,763 INFO  L87              Difference]: Start difference. First operand 353 states and 461 transitions. Second operand  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,800 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,800 INFO  L93              Difference]: Finished difference Result 711 states and 955 transitions.
[2024-12-02 14:40:19,801 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 14:40:19,801 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40
[2024-12-02 14:40:19,801 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,804 INFO  L225             Difference]: With dead ends: 711
[2024-12-02 14:40:19,804 INFO  L226             Difference]: Without dead ends: 365
[2024-12-02 14:40:19,805 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 14:40:19,806 INFO  L435           NwaCegarLoop]: 73 mSDtfsCounter, 0 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,806 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 285 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:19,807 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 365 states.
[2024-12-02 14:40:19,825 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 365 to 365.
[2024-12-02 14:40:19,826 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 365 states, 297 states have (on average 1.2962962962962963) internal successors, (385), 319 states have internal predecessors, (385), 36 states have call successors, (36), 36 states have call predecessors, (36), 31 states have return successors, (52), 31 states have call predecessors, (52), 36 states have call successors, (52)
[2024-12-02 14:40:19,828 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 365 states to 365 states and 473 transitions.
[2024-12-02 14:40:19,828 INFO  L78                 Accepts]: Start accepts. Automaton has 365 states and 473 transitions. Word has length 40
[2024-12-02 14:40:19,828 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,828 INFO  L471      AbstractCegarLoop]: Abstraction has 365 states and 473 transitions.
[2024-12-02 14:40:19,828 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,828 INFO  L276                IsEmpty]: Start isEmpty. Operand 365 states and 473 transitions.
[2024-12-02 14:40:19,830 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 41
[2024-12-02 14:40:19,830 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,830 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,830 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6
[2024-12-02 14:40:19,830 INFO  L396      AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,830 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,831 INFO  L85        PathProgramCache]: Analyzing trace with hash -534950265, now seen corresponding path program 1 times
[2024-12-02 14:40:19,831 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,831 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520941463]
[2024-12-02 14:40:19,831 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,831 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,842 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:19,899 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:19,900 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:19,900 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520941463]
[2024-12-02 14:40:19,900 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520941463] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:19,900 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:19,900 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6
[2024-12-02 14:40:19,900 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311150860]
[2024-12-02 14:40:19,900 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:19,900 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-12-02 14:40:19,900 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:19,901 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-12-02 14:40:19,901 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30
[2024-12-02 14:40:19,901 INFO  L87              Difference]: Start difference. First operand 365 states and 473 transitions. Second operand  has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,941 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:19,941 INFO  L93              Difference]: Finished difference Result 659 states and 865 transitions.
[2024-12-02 14:40:19,941 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2024-12-02 14:40:19,942 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40
[2024-12-02 14:40:19,942 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:19,944 INFO  L225             Difference]: With dead ends: 659
[2024-12-02 14:40:19,944 INFO  L226             Difference]: Without dead ends: 301
[2024-12-02 14:40:19,945 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30
[2024-12-02 14:40:19,945 INFO  L435           NwaCegarLoop]: 72 mSDtfsCounter, 0 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:19,945 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 352 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:19,946 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 301 states.
[2024-12-02 14:40:19,959 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 301.
[2024-12-02 14:40:19,960 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 301 states, 243 states have (on average 1.2839506172839505) internal successors, (312), 261 states have internal predecessors, (312), 30 states have call successors, (30), 30 states have call predecessors, (30), 27 states have return successors, (37), 27 states have call predecessors, (37), 30 states have call successors, (37)
[2024-12-02 14:40:19,961 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 379 transitions.
[2024-12-02 14:40:19,962 INFO  L78                 Accepts]: Start accepts. Automaton has 301 states and 379 transitions. Word has length 40
[2024-12-02 14:40:19,962 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:19,962 INFO  L471      AbstractCegarLoop]: Abstraction has 301 states and 379 transitions.
[2024-12-02 14:40:19,962 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:19,962 INFO  L276                IsEmpty]: Start isEmpty. Operand 301 states and 379 transitions.
[2024-12-02 14:40:19,963 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 41
[2024-12-02 14:40:19,963 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:19,963 INFO  L218           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:19,963 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7
[2024-12-02 14:40:19,964 INFO  L396      AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:19,964 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:19,964 INFO  L85        PathProgramCache]: Analyzing trace with hash 1765872325, now seen corresponding path program 1 times
[2024-12-02 14:40:19,964 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:19,964 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782499081]
[2024-12-02 14:40:19,964 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:19,964 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:19,978 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:20,064 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:20,065 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:20,065 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782499081]
[2024-12-02 14:40:20,065 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782499081] provided 1 perfect and 0 imperfect interpolant sequences
[2024-12-02 14:40:20,065 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-12-02 14:40:20,065 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-12-02 14:40:20,065 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132134424]
[2024-12-02 14:40:20,065 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-12-02 14:40:20,065 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-12-02 14:40:20,065 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:20,066 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-12-02 14:40:20,066 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20
[2024-12-02 14:40:20,066 INFO  L87              Difference]: Start difference. First operand 301 states and 379 transitions. Second operand  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:20,135 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:20,135 INFO  L93              Difference]: Finished difference Result 651 states and 878 transitions.
[2024-12-02 14:40:20,135 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. 
[2024-12-02 14:40:20,136 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40
[2024-12-02 14:40:20,136 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:20,138 INFO  L225             Difference]: With dead ends: 651
[2024-12-02 14:40:20,138 INFO  L226             Difference]: Without dead ends: 451
[2024-12-02 14:40:20,139 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42
[2024-12-02 14:40:20,139 INFO  L435           NwaCegarLoop]: 117 mSDtfsCounter, 43 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:20,139 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 404 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-12-02 14:40:20,140 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 451 states.
[2024-12-02 14:40:20,160 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 451.
[2024-12-02 14:40:20,161 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 451 states, 359 states have (on average 1.2729805013927578) internal successors, (457), 385 states have internal predecessors, (457), 47 states have call successors, (47), 47 states have call predecessors, (47), 44 states have return successors, (76), 44 states have call predecessors, (76), 47 states have call successors, (76)
[2024-12-02 14:40:20,163 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 580 transitions.
[2024-12-02 14:40:20,164 INFO  L78                 Accepts]: Start accepts. Automaton has 451 states and 580 transitions. Word has length 40
[2024-12-02 14:40:20,164 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:20,164 INFO  L471      AbstractCegarLoop]: Abstraction has 451 states and 580 transitions.
[2024-12-02 14:40:20,164 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-12-02 14:40:20,164 INFO  L276                IsEmpty]: Start isEmpty. Operand 451 states and 580 transitions.
[2024-12-02 14:40:20,166 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 64
[2024-12-02 14:40:20,166 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:20,166 INFO  L218           NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:20,167 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8
[2024-12-02 14:40:20,167 INFO  L396      AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:20,167 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:20,167 INFO  L85        PathProgramCache]: Analyzing trace with hash -1419034093, now seen corresponding path program 1 times
[2024-12-02 14:40:20,167 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:20,167 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507369098]
[2024-12-02 14:40:20,167 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:20,167 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:20,182 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:20,292 INFO  L134       CoverageAnalysis]: Checked inductivity of 15 backedges. 11 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:20,292 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-12-02 14:40:20,292 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507369098]
[2024-12-02 14:40:20,292 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507369098] provided 0 perfect and 1 imperfect interpolant sequences
[2024-12-02 14:40:20,292 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [996281465]
[2024-12-02 14:40:20,292 INFO  L97    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-12-02 14:40:20,292 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true
[2024-12-02 14:40:20,292 INFO  L189       MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3
[2024-12-02 14:40:20,294 INFO  L229       MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null)
[2024-12-02 14:40:20,299 INFO  L327       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process
[2024-12-02 14:40:20,385 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-12-02 14:40:20,388 INFO  L256         TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 8 conjuncts are in the unsatisfiable core
[2024-12-02 14:40:20,393 INFO  L279         TraceCheckSpWp]: Computing forward predicates...
[2024-12-02 14:40:20,487 INFO  L134       CoverageAnalysis]: Checked inductivity of 15 backedges. 11 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:20,487 INFO  L312         TraceCheckSpWp]: Computing backward predicates...
[2024-12-02 14:40:20,599 INFO  L134       CoverageAnalysis]: Checked inductivity of 15 backedges. 11 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-12-02 14:40:20,599 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleZ3 [996281465] provided 0 perfect and 2 imperfect interpolant sequences
[2024-12-02 14:40:20,599 INFO  L185   FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences.
[2024-12-02 14:40:20,600 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 6
[2024-12-02 14:40:20,600 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2015826271]
[2024-12-02 14:40:20,600 INFO  L85    oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton
[2024-12-02 14:40:20,600 INFO  L548      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-12-02 14:40:20,601 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-12-02 14:40:20,601 INFO  L144   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-12-02 14:40:20,601 INFO  L146   InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30
[2024-12-02 14:40:20,601 INFO  L87              Difference]: Start difference. First operand 451 states and 580 transitions. Second operand  has 6 states, 6 states have (on average 9.5) internal successors, (57), 6 states have internal predecessors, (57), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4)
[2024-12-02 14:40:20,743 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-12-02 14:40:20,743 INFO  L93              Difference]: Finished difference Result 1047 states and 1425 transitions.
[2024-12-02 14:40:20,743 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. 
[2024-12-02 14:40:20,743 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 6 states have (on average 9.5) internal successors, (57), 6 states have internal predecessors, (57), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 63
[2024-12-02 14:40:20,744 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-12-02 14:40:20,748 INFO  L225             Difference]: With dead ends: 1047
[2024-12-02 14:40:20,748 INFO  L226             Difference]: Without dead ends: 697
[2024-12-02 14:40:20,750 INFO  L434           NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 122 SyntacticMatches, 5 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90
[2024-12-02 14:40:20,751 INFO  L435           NwaCegarLoop]: 107 mSDtfsCounter, 78 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-12-02 14:40:20,751 INFO  L436           NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 421 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-12-02 14:40:20,752 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 697 states.
[2024-12-02 14:40:20,796 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 697 to 617.
[2024-12-02 14:40:20,797 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 617 states, 487 states have (on average 1.2792607802874743) internal successors, (623), 523 states have internal predecessors, (623), 66 states have call successors, (66), 66 states have call predecessors, (66), 63 states have return successors, (115), 58 states have call predecessors, (115), 66 states have call successors, (115)
[2024-12-02 14:40:20,802 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 617 states to 617 states and 804 transitions.
[2024-12-02 14:40:20,803 INFO  L78                 Accepts]: Start accepts. Automaton has 617 states and 804 transitions. Word has length 63
[2024-12-02 14:40:20,803 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-12-02 14:40:20,803 INFO  L471      AbstractCegarLoop]: Abstraction has 617 states and 804 transitions.
[2024-12-02 14:40:20,803 INFO  L472      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 6 states have (on average 9.5) internal successors, (57), 6 states have internal predecessors, (57), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4)
[2024-12-02 14:40:20,803 INFO  L276                IsEmpty]: Start isEmpty. Operand 617 states and 804 transitions.
[2024-12-02 14:40:20,806 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 87
[2024-12-02 14:40:20,806 INFO  L210           NwaCegarLoop]: Found error trace
[2024-12-02 14:40:20,806 INFO  L218           NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:20,815 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0
[2024-12-02 14:40:21,006 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9
[2024-12-02 14:40:21,007 INFO  L396      AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] ===
[2024-12-02 14:40:21,007 INFO  L157       PredicateUnifier]: Initialized classic predicate unifier
[2024-12-02 14:40:21,007 INFO  L85        PathProgramCache]: Analyzing trace with hash -1414153467, now seen corresponding path program 2 times
[2024-12-02 14:40:21,007 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-12-02 14:40:21,008 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801287924]
[2024-12-02 14:40:21,008 INFO  L95    rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1
[2024-12-02 14:40:21,008 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-12-02 14:40:21,033 INFO  L229   tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s)
[2024-12-02 14:40:21,033 INFO  L230   tOrderPrioritization]: Conjunction of SSA is sat
[2024-12-02 14:40:21,033 INFO  L357             TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders.
[2024-12-02 14:40:21,055 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is sat
[2024-12-02 14:40:21,079 INFO  L130   FreeRefinementEngine]: Strategy CAMEL found a feasible trace
[2024-12-02 14:40:21,079 INFO  L340         BasicCegarLoop]: Counterexample is feasible
[2024-12-02 14:40:21,080 INFO  L782   garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining)
[2024-12-02 14:40:21,082 WARN  L453      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10
[2024-12-02 14:40:21,084 INFO  L422         BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-12-02 14:40:21,129 INFO  L170   ceAbstractionStarter]: Computing trace abstraction results
[2024-12-02 14:40:21,132 INFO  L201        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.12 02:40:21 BoogieIcfgContainer
[2024-12-02 14:40:21,132 INFO  L131        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2024-12-02 14:40:21,133 INFO  L112        PluginConnector]: ------------------------Witness Printer----------------------------
[2024-12-02 14:40:21,133 INFO  L270        PluginConnector]: Initializing Witness Printer...
[2024-12-02 14:40:21,133 INFO  L274        PluginConnector]: Witness Printer initialized
[2024-12-02 14:40:21,134 INFO  L184        PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 02:40:18" (3/4) ...
[2024-12-02 14:40:21,134 INFO  L140         WitnessPrinter]: Generating witness for reachability counterexample
[2024-12-02 14:40:21,197 INFO  L129   tionWitnessGenerator]: Generated YAML witness of length 81.
[2024-12-02 14:40:21,269 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/witness.graphml
[2024-12-02 14:40:21,269 INFO  L149         WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/witness.yml
[2024-12-02 14:40:21,270 INFO  L131        PluginConnector]: ------------------------ END Witness Printer----------------------------
[2024-12-02 14:40:21,270 INFO  L158              Benchmark]: Toolchain (without parser) took 3511.32ms. Allocated memory is still 117.4MB. Free memory was 92.7MB in the beginning and 71.5MB in the end (delta: 21.2MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,271 INFO  L158              Benchmark]: CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 72.7MB. There was no memory consumed. Max. memory is 16.1GB.
[2024-12-02 14:40:21,271 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 323.30ms. Allocated memory is still 117.4MB. Free memory was 92.6MB in the beginning and 74.1MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,271 INFO  L158              Benchmark]: Boogie Procedure Inliner took 35.58ms. Allocated memory is still 117.4MB. Free memory was 74.1MB in the beginning and 72.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB.
[2024-12-02 14:40:21,271 INFO  L158              Benchmark]: Boogie Preprocessor took 34.88ms. Allocated memory is still 117.4MB. Free memory was 72.2MB in the beginning and 70.4MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,272 INFO  L158              Benchmark]: RCFGBuilder took 316.92ms. Allocated memory is still 117.4MB. Free memory was 70.4MB in the beginning and 54.6MB in the end (delta: 15.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,272 INFO  L158              Benchmark]: TraceAbstraction took 2658.28ms. Allocated memory is still 117.4MB. Free memory was 54.0MB in the beginning and 83.0MB in the end (delta: -28.9MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,272 INFO  L158              Benchmark]: Witness Printer took 136.83ms. Allocated memory is still 117.4MB. Free memory was 83.0MB in the beginning and 71.5MB in the end (delta: 11.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-12-02 14:40:21,274 INFO  L338   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.29ms. Allocated memory is still 117.4MB. Free memory is still 72.7MB. There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 323.30ms. Allocated memory is still 117.4MB. Free memory was 92.6MB in the beginning and 74.1MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 35.58ms. Allocated memory is still 117.4MB. Free memory was 74.1MB in the beginning and 72.2MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB.
 * Boogie Preprocessor took 34.88ms. Allocated memory is still 117.4MB. Free memory was 72.2MB in the beginning and 70.4MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB.
 * RCFGBuilder took 316.92ms. Allocated memory is still 117.4MB. Free memory was 70.4MB in the beginning and 54.6MB in the end (delta: 15.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 2658.28ms. Allocated memory is still 117.4MB. Free memory was 54.0MB in the beginning and 83.0MB in the end (delta: -28.9MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB.
 * Witness Printer took 136.83ms. Allocated memory is still 117.4MB. Free memory was 83.0MB in the beginning and 71.5MB in the end (delta: 11.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator:
  - GenericResultAtLocation [Line: 49]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [49]
  - GenericResultAtLocation [Line: 121]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [121]
  - GenericResultAtLocation [Line: 315]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [315]
  - GenericResultAtLocation [Line: 324]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [324]
  - GenericResultAtLocation [Line: 423]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [423]
  - GenericResultAtLocation [Line: 518]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [518]
  - GenericResultAtLocation [Line: 553]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [553]
  - GenericResultAtLocation [Line: 919]: Unsoundness Warning
    Ignoring preprocessor pragma C: #pragma merger(0,"Specification4_spec.i","") [919]
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - CounterExampleResult [Line: 320]: a call to reach_error is reachable
    a call to reach_error is reachable
We found a FailurePath: 
[L130]              int pumpRunning  =    0;
[L131]              int systemActive  =    1;
[L325]              int cleanupTimeShifts  =    4;
[L425]              int waterLevel  =    1;
[L426]              int methaneLevelCritical  =    0;
[L723]              static struct __ACC__ERR *head  =    (struct __ACC__ERR *)0;
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L401]              int retValue_acc ;
[L402]              int tmp ;
[L406]  FCALL       select_helpers()
[L407]  FCALL       select_features()
[L408]  CALL, EXPR  valid_product()
[L545]              int retValue_acc ;
[L548]              retValue_acc = 1
[L549]              return (retValue_acc);
        VAL         [\result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L408]  RET, EXPR   valid_product()
[L408]              tmp = valid_product()
[L410]  COND TRUE   \read(tmp)
[L412]  FCALL       setup()
[L413]  CALL        runTest()
[L392]  CALL        test()
[L56]               int splverifierCounter ;
[L57]               int tmp ;
[L58]               int tmp___0 ;
[L59]               int tmp___1 ;
[L60]               int tmp___2 ;
[L63]               splverifierCounter = 0
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L67]   COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L73]               tmp = __VERIFIER_nondet_int()
[L75]   COND TRUE   \read(tmp)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=1]
[L77]   CALL        waterRise()
        VAL         [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1]
[L443]  COND TRUE   waterLevel < 2
[L444]              waterLevel = waterLevel + 1
        VAL         [\old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L77]   RET         waterRise()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L83]               tmp___0 = __VERIFIER_nondet_int()
[L85]   COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L93]               tmp___2 = __VERIFIER_nondet_int()
[L95]   COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, splverifierCounter=0, systemActive=1, waterLevel=2]
[L110]  CALL        timeShift()
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L138]  COND FALSE  !(\read(pumpRunning))
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L145]  COND TRUE   \read(systemActive)
[L147]  CALL        processEnvironment()
[L167]              int tmp ;
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L170]  COND TRUE   ! pumpRunning
[L172]  CALL, EXPR  isHighWaterLevel()
[L282]              int retValue_acc ;
[L283]              int tmp ;
[L284]              int tmp___0 ;
[L288]  CALL, EXPR  isHighWaterSensorDry()
[L505]              int retValue_acc ;
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L508]  COND FALSE  !(waterLevel < 2)
[L512]              retValue_acc = 0
[L513]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L288]  RET, EXPR   isHighWaterSensorDry()
[L288]              tmp = isHighWaterSensorDry()
[L290]  COND FALSE  !(\read(tmp))
[L293]              tmp___0 = 1
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, tmp___0=1, waterLevel=2]
[L295]              retValue_acc = tmp___0
[L296]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L172]  RET, EXPR   isHighWaterLevel()
[L172]              tmp = isHighWaterLevel()
[L174]  COND TRUE   \read(tmp)
[L176]  CALL        activatePump()
[L201]              int tmp ;
[L205]  CALL, EXPR  isMethaneAlarm()
[L226]              int retValue_acc ;
[L230]  CALL, EXPR  isMethaneLevelCritical()
[L464]              int retValue_acc ;
[L467]              retValue_acc = methaneLevelCritical
[L468]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L230]  RET, EXPR   isMethaneLevelCritical()
[L230]              retValue_acc = isMethaneLevelCritical()
[L232]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2]
[L205]  RET, EXPR   isMethaneAlarm()
[L205]              tmp = isMethaneAlarm()
[L207]  COND FALSE  !(\read(tmp))
[L211]  CALL        activatePump__wrappee__highWaterSensor()
[L195]              pumpRunning = 1
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L211]  RET         activatePump__wrappee__highWaterSensor()
[L176]  RET         activatePump()
[L147]  RET         processEnvironment()
[L153]  CALL        __utac_acc__Specification4_spec__1()
[L921]              int tmp ;
[L922]              int tmp___0 ;
[L926]  CALL, EXPR  getWaterLevel()
[L496]              int retValue_acc ;
[L499]              retValue_acc = waterLevel
[L500]              return (retValue_acc);
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, \result=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L926]  RET, EXPR   getWaterLevel()
[L926]              tmp = getWaterLevel()
[L928]  COND FALSE  !(tmp == 0)
        VAL         [\old(pumpRunning)=0, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L153]  RET         __utac_acc__Specification4_spec__1()
[L110]  RET         timeShift()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L67]   COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L73]               tmp = __VERIFIER_nondet_int()
[L75]   COND FALSE  !(\read(tmp))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L83]               tmp___0 = __VERIFIER_nondet_int()
[L85]   COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L93]               tmp___2 = __VERIFIER_nondet_int()
[L95]   COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=2]
[L110]  CALL        timeShift()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2]
[L138]  COND TRUE   \read(pumpRunning)
[L140]  CALL        lowerWaterLevel()
[L431]  COND TRUE   waterLevel > 0
[L432]              waterLevel = waterLevel - 1
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L140]  RET         lowerWaterLevel()
[L145]  COND TRUE   \read(systemActive)
[L147]  CALL        processEnvironment()
[L167]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L170]  COND FALSE  !(! pumpRunning)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L185]  FCALL       processEnvironment__wrappee__base()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L147]  RET         processEnvironment()
[L153]  CALL        __utac_acc__Specification4_spec__1()
[L921]              int tmp ;
[L922]              int tmp___0 ;
[L926]  CALL, EXPR  getWaterLevel()
[L496]              int retValue_acc ;
[L499]              retValue_acc = waterLevel
[L500]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L926]  RET, EXPR   getWaterLevel()
[L926]              tmp = getWaterLevel()
[L928]  COND FALSE  !(tmp == 0)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=2, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L153]  RET         __utac_acc__Specification4_spec__1()
[L110]  RET         timeShift()
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L67]   COND TRUE   splverifierCounter < 4
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L73]               tmp = __VERIFIER_nondet_int()
[L75]   COND FALSE  !(\read(tmp))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L83]               tmp___0 = __VERIFIER_nondet_int()
[L85]   COND FALSE  !(\read(tmp___0))
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L93]               tmp___2 = __VERIFIER_nondet_int()
[L95]   COND TRUE   \read(tmp___2)
        VAL         [cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, splverifierCounter=0, systemActive=1, waterLevel=1]
[L110]  CALL        timeShift()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1]
[L138]  COND TRUE   \read(pumpRunning)
[L140]  CALL        lowerWaterLevel()
[L431]  COND TRUE   waterLevel > 0
[L432]              waterLevel = waterLevel - 1
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L140]  RET         lowerWaterLevel()
[L145]  COND TRUE   \read(systemActive)
[L147]  CALL        processEnvironment()
[L167]              int tmp ;
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L170]  COND FALSE  !(! pumpRunning)
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L185]  FCALL       processEnvironment__wrappee__base()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L147]  RET         processEnvironment()
[L153]  CALL        __utac_acc__Specification4_spec__1()
[L921]              int tmp ;
[L922]              int tmp___0 ;
[L926]  CALL, EXPR  getWaterLevel()
[L496]              int retValue_acc ;
[L499]              retValue_acc = waterLevel
[L500]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L926]  RET, EXPR   getWaterLevel()
[L926]              tmp = getWaterLevel()
[L928]  COND TRUE   tmp == 0
[L930]  CALL, EXPR  isPumpRunning()
[L237]              int retValue_acc ;
[L240]              retValue_acc = pumpRunning
[L241]              return (retValue_acc);
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, \result=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]
[L930]  RET, EXPR   isPumpRunning()
[L930]              tmp___0 = isPumpRunning()
[L932]  COND TRUE   \read(tmp___0)
[L934]  CALL        __automaton_fail()
[L320]              reach_error()
        VAL         [\old(pumpRunning)=1, \old(waterLevel)=1, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0]

  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 6 procedures, 76 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.6s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 480 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 477 mSDsluCounter, 2646 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1810 mSDsCounter, 34 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 241 IncrementalHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 34 mSolverCounterUnsat, 836 mSDtfsCounter, 241 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 183 GetRequests, 140 SyntacticMatches, 5 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=617occurred in iteration=10, InterpolantAutomatonStates: 48, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 92 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 479 NumberOfCodeBlocks, 479 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 444 ConstructedInterpolants, 0 QuantifiedInterpolants, 809 SizeOfPredicates, 2 NumberOfNonLiveVariables, 240 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 33/45 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available
RESULT: Ultimate proved your program to be incorrect!
[2024-12-02 14:40:21,290 INFO  L552       MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9e2e526f-0df5-450b-8ef3-3b30571f862f/bin/uautomizer-verify-84ZbGMXZE1/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Writing human readable error path to file UltimateCounterExample.errorpath
Result:
FALSE