/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:24:18,673 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:24:18,675 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:24:18,693 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:24:18,693 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:24:18,694 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:24:18,695 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:24:18,696 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:24:18,697 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:24:18,698 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:24:18,707 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:24:18,709 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:24:18,709 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:24:18,713 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:24:18,713 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:24:18,714 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:24:18,714 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:24:18,715 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:24:18,716 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:24:18,717 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:24:18,718 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:24:18,720 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:24:18,750 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:24:18,751 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:24:18,752 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:24:18,753 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:24:18,753 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:24:18,753 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:24:18,754 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:24:18,754 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:24:18,754 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:24:18,755 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:24:18,755 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:24:18,756 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:24:18,757 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:24:18,757 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:24:18,757 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:24:18,757 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:24:18,757 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:24:18,758 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:24:18,758 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:24:18,760 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:24:18,774 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:24:18,774 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:24:18,774 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:24:18,774 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:24:18,775 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:24:18,775 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:24:18,775 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:24:18,775 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:24:18,775 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:24:18,775 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:24:18,775 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:24:18,776 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:24:18,776 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:18,777 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:24:18,777 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:24:18,778 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:24:18,778 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:24:18,778 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:24:18,952 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:24:18,972 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:24:18,973 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:24:18,974 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:24:18,977 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:24:18,978 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-10 12:24:19,049 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/04830c97c/791551a42dba403b95182a5a182ae2fe/FLAGeff100163 [2022-01-10 12:24:19,429 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:24:19,430 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-10 12:24:19,444 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/04830c97c/791551a42dba403b95182a5a182ae2fe/FLAGeff100163 [2022-01-10 12:24:19,457 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/04830c97c/791551a42dba403b95182a5a182ae2fe [2022-01-10 12:24:19,459 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:24:19,461 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:24:19,463 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:19,463 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:24:19,465 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:24:19,466 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:19,467 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@61c31a19 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19, skipping insertion in model container [2022-01-10 12:24:19,467 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:19,471 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:24:19,514 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:19,728 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 12:24:19,788 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:19,805 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:24:19,809 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:19,836 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 12:24:19,874 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:19,891 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:24:19,917 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 12:24:19,963 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:19,986 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:24:19,987 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19 WrapperNode [2022-01-10 12:24:19,987 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:19,988 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:19,988 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:24:19,988 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:24:19,993 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,015 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,048 INFO L137 Inliner]: procedures = 57, calls = 156, calls flagged for inlining = 53, calls inlined = 80, statements flattened = 604 [2022-01-10 12:24:20,048 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:20,048 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:24:20,049 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:24:20,049 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:24:20,056 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,056 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,059 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,059 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,066 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,070 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,072 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,075 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:24:20,076 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:24:20,076 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:24:20,076 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:24:20,077 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (1/1) ... [2022-01-10 12:24:20,087 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:20,097 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:20,121 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:24:20,134 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:24:20,164 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:24:20,164 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:24:20,164 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:24:20,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:24:20,225 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:24:20,226 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:24:20,621 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:24:20,629 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:24:20,629 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:24:20,632 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:20 BoogieIcfgContainer [2022-01-10 12:24:20,632 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:24:20,632 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:24:20,632 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:24:20,634 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:24:20,636 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:20" (1/1) ... [2022-01-10 12:24:20,760 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:20 BasicIcfg [2022-01-10 12:24:20,760 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:24:20,761 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:24:20,761 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:24:20,763 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:24:20,764 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:24:19" (1/4) ... [2022-01-10 12:24:20,764 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b30bf44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:20, skipping insertion in model container [2022-01-10 12:24:20,764 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:19" (2/4) ... [2022-01-10 12:24:20,764 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b30bf44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:20, skipping insertion in model container [2022-01-10 12:24:20,764 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:20" (3/4) ... [2022-01-10 12:24:20,765 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b30bf44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:20, skipping insertion in model container [2022-01-10 12:24:20,765 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:20" (4/4) ... [2022-01-10 12:24:20,765 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.cTransformedIcfg [2022-01-10 12:24:20,773 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:24:20,773 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:24:20,810 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:24:20,816 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:24:20,817 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:24:20,829 INFO L276 IsEmpty]: Start isEmpty. Operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:20,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:24:20,833 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:20,834 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:20,834 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:20,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:20,838 INFO L85 PathProgramCache]: Analyzing trace with hash -429092198, now seen corresponding path program 1 times [2022-01-10 12:24:20,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:20,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [311822166] [2022-01-10 12:24:20,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:20,845 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:20,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,027 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:21,028 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [311822166] [2022-01-10 12:24:21,029 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [311822166] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,029 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,029 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:21,030 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035299407] [2022-01-10 12:24:21,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,033 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:24:21,033 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:24:21,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:21,098 INFO L87 Difference]: Start difference. First operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:21,136 INFO L93 Difference]: Finished difference Result 323 states and 444 transitions. [2022-01-10 12:24:21,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:24:21,140 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:24:21,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:21,147 INFO L225 Difference]: With dead ends: 323 [2022-01-10 12:24:21,148 INFO L226 Difference]: Without dead ends: 157 [2022-01-10 12:24:21,150 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:21,155 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:21,156 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:21,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-01-10 12:24:21,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-01-10 12:24:21,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.3636363636363635) internal successors, (210), 156 states have internal predecessors, (210), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 210 transitions. [2022-01-10 12:24:21,197 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 210 transitions. Word has length 19 [2022-01-10 12:24:21,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:21,197 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 210 transitions. [2022-01-10 12:24:21,197 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,198 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 210 transitions. [2022-01-10 12:24:21,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:24:21,199 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:21,199 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:21,200 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:24:21,200 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:21,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:21,202 INFO L85 PathProgramCache]: Analyzing trace with hash 2048464979, now seen corresponding path program 1 times [2022-01-10 12:24:21,202 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:21,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1533311611] [2022-01-10 12:24:21,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:21,203 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:21,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:21,308 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1533311611] [2022-01-10 12:24:21,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1533311611] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,308 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:21,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580924949] [2022-01-10 12:24:21,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,311 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:21,311 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:21,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,314 INFO L87 Difference]: Start difference. First operand 157 states and 210 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:21,363 INFO L93 Difference]: Finished difference Result 370 states and 499 transitions. [2022-01-10 12:24:21,365 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:21,365 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:24:21,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:21,367 INFO L225 Difference]: With dead ends: 370 [2022-01-10 12:24:21,367 INFO L226 Difference]: Without dead ends: 221 [2022-01-10 12:24:21,367 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,368 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 193 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:21,368 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:21,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-01-10 12:24:21,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 212. [2022-01-10 12:24:21,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 209 states have (on average 1.3732057416267942) internal successors, (287), 211 states have internal predecessors, (287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 287 transitions. [2022-01-10 12:24:21,385 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 287 transitions. Word has length 20 [2022-01-10 12:24:21,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:21,386 INFO L470 AbstractCegarLoop]: Abstraction has 212 states and 287 transitions. [2022-01-10 12:24:21,387 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,389 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 287 transitions. [2022-01-10 12:24:21,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 12:24:21,395 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:21,395 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:21,395 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:24:21,395 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:21,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:21,396 INFO L85 PathProgramCache]: Analyzing trace with hash 1951981762, now seen corresponding path program 1 times [2022-01-10 12:24:21,396 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:21,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1512499930] [2022-01-10 12:24:21,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:21,396 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:21,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:21,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1512499930] [2022-01-10 12:24:21,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1512499930] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,466 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:21,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134526272] [2022-01-10 12:24:21,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:21,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:21,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,467 INFO L87 Difference]: Start difference. First operand 212 states and 287 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:21,537 INFO L93 Difference]: Finished difference Result 475 states and 642 transitions. [2022-01-10 12:24:21,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:21,538 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 12:24:21,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:21,540 INFO L225 Difference]: With dead ends: 475 [2022-01-10 12:24:21,540 INFO L226 Difference]: Without dead ends: 271 [2022-01-10 12:24:21,544 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,548 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 141 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:21,548 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 295 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:21,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-01-10 12:24:21,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 265. [2022-01-10 12:24:21,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 264 states have internal predecessors, (347), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 347 transitions. [2022-01-10 12:24:21,573 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 347 transitions. Word has length 25 [2022-01-10 12:24:21,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:21,573 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 347 transitions. [2022-01-10 12:24:21,573 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,573 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 347 transitions. [2022-01-10 12:24:21,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 12:24:21,574 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:21,574 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:21,574 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:24:21,574 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:21,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:21,575 INFO L85 PathProgramCache]: Analyzing trace with hash -582203850, now seen corresponding path program 1 times [2022-01-10 12:24:21,575 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:21,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353240482] [2022-01-10 12:24:21,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:21,575 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:21,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:21,640 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353240482] [2022-01-10 12:24:21,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353240482] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,640 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,641 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:21,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458104724] [2022-01-10 12:24:21,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:21,641 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:21,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,642 INFO L87 Difference]: Start difference. First operand 265 states and 347 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:21,689 INFO L93 Difference]: Finished difference Result 522 states and 686 transitions. [2022-01-10 12:24:21,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:21,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 12:24:21,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:21,692 INFO L225 Difference]: With dead ends: 522 [2022-01-10 12:24:21,693 INFO L226 Difference]: Without dead ends: 516 [2022-01-10 12:24:21,693 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,697 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 166 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:21,698 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 385 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:21,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2022-01-10 12:24:21,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 516. [2022-01-10 12:24:21,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 513 states have (on average 1.3138401559454191) internal successors, (674), 515 states have internal predecessors, (674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 674 transitions. [2022-01-10 12:24:21,720 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 674 transitions. Word has length 30 [2022-01-10 12:24:21,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:21,720 INFO L470 AbstractCegarLoop]: Abstraction has 516 states and 674 transitions. [2022-01-10 12:24:21,720 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,720 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 674 transitions. [2022-01-10 12:24:21,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 12:24:21,725 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:21,725 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:21,726 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:24:21,726 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:21,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:21,727 INFO L85 PathProgramCache]: Analyzing trace with hash 714549505, now seen corresponding path program 1 times [2022-01-10 12:24:21,727 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:21,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1922989264] [2022-01-10 12:24:21,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:21,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:21,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,782 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:21,783 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,783 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1922989264] [2022-01-10 12:24:21,783 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1922989264] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,783 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,783 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:21,783 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641189423] [2022-01-10 12:24:21,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:21,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:21,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,784 INFO L87 Difference]: Start difference. First operand 516 states and 674 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:21,813 INFO L93 Difference]: Finished difference Result 516 states and 674 transitions. [2022-01-10 12:24:21,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:21,813 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 12:24:21,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:21,814 INFO L225 Difference]: With dead ends: 516 [2022-01-10 12:24:21,814 INFO L226 Difference]: Without dead ends: 230 [2022-01-10 12:24:21,815 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:21,815 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 57 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:21,815 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:21,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2022-01-10 12:24:21,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2022-01-10 12:24:21,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 229 states have (on average 1.3362445414847162) internal successors, (306), 229 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 306 transitions. [2022-01-10 12:24:21,837 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 306 transitions. Word has length 43 [2022-01-10 12:24:21,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:21,839 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 306 transitions. [2022-01-10 12:24:21,839 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:21,839 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 306 transitions. [2022-01-10 12:24:21,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-01-10 12:24:21,842 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:21,842 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:21,842 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:24:21,842 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:21,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:21,842 INFO L85 PathProgramCache]: Analyzing trace with hash 683143848, now seen corresponding path program 1 times [2022-01-10 12:24:21,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:21,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861235455] [2022-01-10 12:24:21,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:21,843 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:21,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:21,939 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 12:24:21,939 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:21,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861235455] [2022-01-10 12:24:21,939 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861235455] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:21,939 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:21,939 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:21,939 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [969855660] [2022-01-10 12:24:21,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:21,940 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:21,940 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:21,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:21,940 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:21,940 INFO L87 Difference]: Start difference. First operand 230 states and 306 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,021 INFO L93 Difference]: Finished difference Result 884 states and 1174 transitions. [2022-01-10 12:24:22,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:24:22,022 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-01-10 12:24:22,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,025 INFO L225 Difference]: With dead ends: 884 [2022-01-10 12:24:22,025 INFO L226 Difference]: Without dead ends: 662 [2022-01-10 12:24:22,025 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:22,026 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 352 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,027 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [352 Valid, 525 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2022-01-10 12:24:22,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 331. [2022-01-10 12:24:22,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 330 states have (on average 1.3181818181818181) internal successors, (435), 330 states have internal predecessors, (435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 435 transitions. [2022-01-10 12:24:22,049 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 435 transitions. Word has length 49 [2022-01-10 12:24:22,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,049 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 435 transitions. [2022-01-10 12:24:22,049 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,050 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 435 transitions. [2022-01-10 12:24:22,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 12:24:22,050 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,051 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:24:22,051 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,051 INFO L85 PathProgramCache]: Analyzing trace with hash -181742847, now seen corresponding path program 1 times [2022-01-10 12:24:22,051 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457233790] [2022-01-10 12:24:22,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,052 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,121 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 12:24:22,122 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457233790] [2022-01-10 12:24:22,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457233790] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,122 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:22,123 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [180209508] [2022-01-10 12:24:22,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,123 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:22,123 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:22,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:22,124 INFO L87 Difference]: Start difference. First operand 331 states and 435 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,204 INFO L93 Difference]: Finished difference Result 811 states and 1061 transitions. [2022-01-10 12:24:22,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:22,205 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-01-10 12:24:22,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,207 INFO L225 Difference]: With dead ends: 811 [2022-01-10 12:24:22,207 INFO L226 Difference]: Without dead ends: 488 [2022-01-10 12:24:22,207 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:22,208 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 168 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,208 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 357 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-01-10 12:24:22,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 278. [2022-01-10 12:24:22,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 277 states have (on average 1.3068592057761732) internal successors, (362), 277 states have internal predecessors, (362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 362 transitions. [2022-01-10 12:24:22,238 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 362 transitions. Word has length 51 [2022-01-10 12:24:22,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,239 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 362 transitions. [2022-01-10 12:24:22,239 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,239 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 362 transitions. [2022-01-10 12:24:22,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 12:24:22,241 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,241 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,241 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:24:22,241 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,241 INFO L85 PathProgramCache]: Analyzing trace with hash 637933471, now seen corresponding path program 1 times [2022-01-10 12:24:22,242 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1146921493] [2022-01-10 12:24:22,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,242 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,304 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:22,305 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1146921493] [2022-01-10 12:24:22,305 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1146921493] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,305 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,305 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:22,305 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634831452] [2022-01-10 12:24:22,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,306 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:22,306 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:22,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:22,306 INFO L87 Difference]: Start difference. First operand 278 states and 362 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,397 INFO L93 Difference]: Finished difference Result 772 states and 998 transitions. [2022-01-10 12:24:22,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:24:22,397 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 12:24:22,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,398 INFO L225 Difference]: With dead ends: 772 [2022-01-10 12:24:22,399 INFO L226 Difference]: Without dead ends: 502 [2022-01-10 12:24:22,399 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:22,399 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 170 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,400 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [170 Valid, 434 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-01-10 12:24:22,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 290. [2022-01-10 12:24:22,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 289 states have (on average 1.2941176470588236) internal successors, (374), 289 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 374 transitions. [2022-01-10 12:24:22,424 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 374 transitions. Word has length 68 [2022-01-10 12:24:22,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,424 INFO L470 AbstractCegarLoop]: Abstraction has 290 states and 374 transitions. [2022-01-10 12:24:22,424 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,424 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 374 transitions. [2022-01-10 12:24:22,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 12:24:22,425 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,425 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,425 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:24:22,426 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,426 INFO L85 PathProgramCache]: Analyzing trace with hash 189236832, now seen corresponding path program 1 times [2022-01-10 12:24:22,426 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402669824] [2022-01-10 12:24:22,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,426 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,459 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:22,459 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,459 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402669824] [2022-01-10 12:24:22,459 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402669824] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,459 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,459 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:22,459 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394467180] [2022-01-10 12:24:22,460 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,460 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:22,460 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:22,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:22,460 INFO L87 Difference]: Start difference. First operand 290 states and 374 transitions. Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,523 INFO L93 Difference]: Finished difference Result 812 states and 1038 transitions. [2022-01-10 12:24:22,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:22,523 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 12:24:22,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,525 INFO L225 Difference]: With dead ends: 812 [2022-01-10 12:24:22,525 INFO L226 Difference]: Without dead ends: 530 [2022-01-10 12:24:22,525 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:22,526 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 144 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,526 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 317 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-01-10 12:24:22,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 298. [2022-01-10 12:24:22,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 297 states have (on average 1.2861952861952861) internal successors, (382), 297 states have internal predecessors, (382), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 382 transitions. [2022-01-10 12:24:22,554 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 382 transitions. Word has length 68 [2022-01-10 12:24:22,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,554 INFO L470 AbstractCegarLoop]: Abstraction has 298 states and 382 transitions. [2022-01-10 12:24:22,554 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,555 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 382 transitions. [2022-01-10 12:24:22,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 12:24:22,555 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,555 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,555 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:24:22,556 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,556 INFO L85 PathProgramCache]: Analyzing trace with hash -1511503647, now seen corresponding path program 1 times [2022-01-10 12:24:22,556 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1268269144] [2022-01-10 12:24:22,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,556 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,622 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 12:24:22,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1268269144] [2022-01-10 12:24:22,622 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1268269144] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,622 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,622 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:24:22,622 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369494319] [2022-01-10 12:24:22,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,623 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:24:22,623 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:24:22,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:22,623 INFO L87 Difference]: Start difference. First operand 298 states and 382 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,821 INFO L93 Difference]: Finished difference Result 1184 states and 1525 transitions. [2022-01-10 12:24:22,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 12:24:22,822 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 12:24:22,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,825 INFO L225 Difference]: With dead ends: 1184 [2022-01-10 12:24:22,825 INFO L226 Difference]: Without dead ends: 894 [2022-01-10 12:24:22,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-10 12:24:22,826 INFO L933 BasicCegarLoop]: 251 mSDtfsCounter, 364 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 364 SdHoareTripleChecker+Valid, 1118 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [364 Valid, 1118 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2022-01-10 12:24:22,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 266. [2022-01-10 12:24:22,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 265 states have (on average 1.2679245283018867) internal successors, (336), 265 states have internal predecessors, (336), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 336 transitions. [2022-01-10 12:24:22,854 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 336 transitions. Word has length 68 [2022-01-10 12:24:22,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,855 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 336 transitions. [2022-01-10 12:24:22,855 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,855 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 336 transitions. [2022-01-10 12:24:22,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 12:24:22,856 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,856 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,856 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:24:22,856 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,857 INFO L85 PathProgramCache]: Analyzing trace with hash -1381747203, now seen corresponding path program 1 times [2022-01-10 12:24:22,857 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [716694504] [2022-01-10 12:24:22,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,857 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,888 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:22,891 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [716694504] [2022-01-10 12:24:22,891 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [716694504] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,891 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,891 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:22,891 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [43662183] [2022-01-10 12:24:22,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,892 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:22,892 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:22,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,892 INFO L87 Difference]: Start difference. First operand 266 states and 336 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,933 INFO L93 Difference]: Finished difference Result 509 states and 646 transitions. [2022-01-10 12:24:22,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:22,933 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 12:24:22,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,934 INFO L225 Difference]: With dead ends: 509 [2022-01-10 12:24:22,934 INFO L226 Difference]: Without dead ends: 251 [2022-01-10 12:24:22,934 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,935 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 27 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,935 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 153 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-01-10 12:24:22,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 245. [2022-01-10 12:24:22,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 244 states have (on average 1.2336065573770492) internal successors, (301), 244 states have internal predecessors, (301), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 301 transitions. [2022-01-10 12:24:22,961 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 301 transitions. Word has length 69 [2022-01-10 12:24:22,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,961 INFO L470 AbstractCegarLoop]: Abstraction has 245 states and 301 transitions. [2022-01-10 12:24:22,961 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,961 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 301 transitions. [2022-01-10 12:24:22,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 12:24:22,963 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,963 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,963 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:24:22,964 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,964 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,964 INFO L85 PathProgramCache]: Analyzing trace with hash -1490070595, now seen corresponding path program 1 times [2022-01-10 12:24:22,964 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132814523] [2022-01-10 12:24:22,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,964 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,993 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-10 12:24:22,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132814523] [2022-01-10 12:24:22,994 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132814523] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,994 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,994 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:22,994 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1458465809] [2022-01-10 12:24:22,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,994 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:22,994 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:22,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,995 INFO L87 Difference]: Start difference. First operand 245 states and 301 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,021 INFO L93 Difference]: Finished difference Result 467 states and 574 transitions. [2022-01-10 12:24:23,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:23,021 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 12:24:23,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,022 INFO L225 Difference]: With dead ends: 467 [2022-01-10 12:24:23,022 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:24:23,022 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,023 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 29 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,023 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 164 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:23,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:24:23,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:24:23,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:24:23,024 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 74 [2022-01-10 12:24:23,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,024 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:24:23,024 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,024 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:24:23,024 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:24:23,026 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:24:23,026 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:24:23,026 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:24:23,026 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-10 12:24:23,028 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:24:27,838 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:24:27,838 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:24:27,838 INFO L854 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:27,838 INFO L854 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:27,843 INFO L854 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:27,844 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-01-10 12:24:27,844 INFO L854 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:27,857 INFO L858 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:27,858 INFO L861 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-01-10 12:24:27,858 INFO L854 garLoopResultBuilder]: At program point L316-2(lines 316 363) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L854 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L382-3(lines 382 388) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L382-5(lines 381 400) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-01-10 12:24:27,858 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L440-2(lines 440 457) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 395) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 332) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L414-6(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L100-3(lines 95 103) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 477 487) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L140-3(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L406-7(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L274-2(lines 274 291) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 342) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L858 garLoopResultBuilder]: For program point L444-3(lines 444 452) no Hoare annotation was computed. [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L145-3(lines 136 149) the Hoare annotation is: false [2022-01-10 12:24:27,859 INFO L854 garLoopResultBuilder]: At program point L414-7(lines 410 434) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L493-1(lines 488 496) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L274-3(lines 266 294) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 469 476) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L414-4(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L542-9(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L440-3(lines 436 460) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L278-2(lines 278 288) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 378 401) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 346 359) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L406-5(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L542-11(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L279-3(lines 279 285) no Hoare annotation was computed. [2022-01-10 12:24:27,860 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: false [2022-01-10 12:24:27,860 INFO L858 garLoopResultBuilder]: For program point L382(lines 382 388) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: false [2022-01-10 12:24:27,861 INFO L854 garLoopResultBuilder]: At program point L414-5(lines 410 434) the Hoare annotation is: false [2022-01-10 12:24:27,861 INFO L854 garLoopResultBuilder]: At program point L548-3(lines 533 551) the Hoare annotation is: false [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L300-1(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L861 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L382-2(lines 381 400) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L854 garLoopResultBuilder]: At program point L474(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L556-2(lines 556 562) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L542-6(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point L418-9(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,861 INFO L854 garLoopResultBuilder]: At program point L301-1(lines 296 303) the Hoare annotation is: false [2022-01-10 12:24:27,861 INFO L861 garLoopResultBuilder]: At program point L369(lines 306 371) the Hoare annotation is: true [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L542-8(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L466-3(lines 461 468) the Hoare annotation is: false [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L406-6(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,862 INFO L861 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L167-1(lines 167 171) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L414-2(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L548-2(lines 533 551) the Hoare annotation is: false [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L382-6(lines 382 388) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:27,862 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,862 INFO L854 garLoopResultBuilder]: At program point L406-3(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L418-6(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L382-8(lines 381 400) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L414-3(lines 410 434) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L466-2(lines 461 468) the Hoare annotation is: false [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L406-4(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L440-4(lines 440 457) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 395) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 469 476) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~4#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,863 INFO L858 garLoopResultBuilder]: For program point L542-3(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L440-1(lines 436 460) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L399(lines 378 401) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L100-4(lines 95 103) the Hoare annotation is: false [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L414-10(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L100-5(lines 95 103) the Hoare annotation is: false [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L406-1(lines 402 408) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L542-5(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 477 487) the Hoare annotation is: false [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L140-5(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L406-11(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L274-4(lines 274 291) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: false [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L414-1(lines 410 434) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:27,864 INFO L854 garLoopResultBuilder]: At program point L548-1(lines 533 551) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2))) [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,864 INFO L858 garLoopResultBuilder]: For program point L444-6(lines 444 452) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L145-5(lines 136 149) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L414-11(lines 410 434) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L493-2(lines 488 496) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L274-5(lines 266 294) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L418-3(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 469 476) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L414-8(lines 414 431) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L542-15(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L440-5(lines 436 460) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L278-4(lines 278 288) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L399-2(lines 378 401) the Hoare annotation is: false [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L466-1(lines 461 468) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L406-2(lines 402 408) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 12:24:27,865 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:24:27,865 INFO L854 garLoopResultBuilder]: At program point L406-9(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L542-17(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L279-6(lines 279 285) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L145-4(lines 136 149) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L414-9(lines 410 434) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L548-5(lines 533 551) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L300-2(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L542-12(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L418-15(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L301-2(lines 296 303) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L406(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L542-14(lines 542 546) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L466-5(lines 461 468) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L406-10(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L548-4(lines 533 551) the Hoare annotation is: false [2022-01-10 12:24:27,866 INFO L858 garLoopResultBuilder]: For program point L418-12(lines 418 426) no Hoare annotation was computed. [2022-01-10 12:24:27,866 INFO L854 garLoopResultBuilder]: At program point L466-4(lines 461 468) the Hoare annotation is: false [2022-01-10 12:24:27,867 INFO L854 garLoopResultBuilder]: At program point L406-8(lines 402 408) the Hoare annotation is: false [2022-01-10 12:24:27,884 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,885 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:24:27,980 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:27 BasicIcfg [2022-01-10 12:24:27,981 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:24:27,981 INFO L158 Benchmark]: Toolchain (without parser) took 8519.97ms. Allocated memory was 191.9MB in the beginning and 521.1MB in the end (delta: 329.3MB). Free memory was 144.9MB in the beginning and 483.9MB in the end (delta: -339.0MB). Peak memory consumption was 209.5MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,981 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 191.9MB. Free memory is still 162.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:24:27,981 INFO L158 Benchmark]: CACSL2BoogieTranslator took 524.28ms. Allocated memory is still 191.9MB. Free memory was 144.7MB in the beginning and 154.8MB in the end (delta: -10.1MB). Peak memory consumption was 8.5MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,981 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.93ms. Allocated memory is still 191.9MB. Free memory was 154.8MB in the beginning and 151.3MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,982 INFO L158 Benchmark]: Boogie Preprocessor took 26.77ms. Allocated memory is still 191.9MB. Free memory was 151.3MB in the beginning and 148.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,982 INFO L158 Benchmark]: RCFGBuilder took 556.04ms. Allocated memory is still 191.9MB. Free memory was 148.9MB in the beginning and 125.7MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,982 INFO L158 Benchmark]: IcfgTransformer took 127.90ms. Allocated memory is still 191.9MB. Free memory was 125.7MB in the beginning and 116.3MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,982 INFO L158 Benchmark]: TraceAbstraction took 7219.39ms. Allocated memory was 191.9MB in the beginning and 521.1MB in the end (delta: 329.3MB). Free memory was 116.0MB in the beginning and 483.9MB in the end (delta: -367.9MB). Peak memory consumption was 182.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:27,983 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 191.9MB. Free memory is still 162.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 524.28ms. Allocated memory is still 191.9MB. Free memory was 144.7MB in the beginning and 154.8MB in the end (delta: -10.1MB). Peak memory consumption was 8.5MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 59.93ms. Allocated memory is still 191.9MB. Free memory was 154.8MB in the beginning and 151.3MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 26.77ms. Allocated memory is still 191.9MB. Free memory was 151.3MB in the beginning and 148.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 556.04ms. Allocated memory is still 191.9MB. Free memory was 148.9MB in the beginning and 125.7MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. * IcfgTransformer took 127.90ms. Allocated memory is still 191.9MB. Free memory was 125.7MB in the beginning and 116.3MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 7219.39ms. Allocated memory was 191.9MB in the beginning and 521.1MB in the end (delta: 329.3MB). Free memory was 116.0MB in the beginning and 483.9MB in the end (delta: -367.9MB). Peak memory consumption was 182.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 167 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 7.1s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1811 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1811 mSDsluCounter, 4360 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2503 mSDsCounter, 86 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 266 IncrementalHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 86 mSolverCounterUnsat, 1857 mSDtfsCounter, 266 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=516occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1634 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 82 LocationsWithAnnotation, 82 PreInvPairs, 165 NumberOfFragments, 1785 HoareAnnotationTreeSize, 82 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 82 FomulaSimplificationsInter, 232314 FormulaSimplificationTreeSizeReductionInter, 3.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 584 NumberOfCodeBlocks, 584 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 572 ConstructedInterpolants, 0 QuantifiedInterpolants, 1129 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 149/149 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) RESULT: Ultimate proved your program to be correct! [2022-01-10 12:24:28,074 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...