/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:24:19,785 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:24:19,787 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:24:19,848 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:24:19,849 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:24:19,849 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:24:19,850 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:24:19,851 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:24:19,852 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:24:19,853 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:24:19,853 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:24:19,854 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:24:19,854 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:24:19,855 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:24:19,855 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:24:19,856 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:24:19,856 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:24:19,857 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:24:19,858 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:24:19,859 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:24:19,860 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:24:19,861 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:24:19,861 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:24:19,862 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:24:19,863 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:24:19,864 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:24:19,864 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:24:19,864 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:24:19,864 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:24:19,865 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:24:19,865 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:24:19,866 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:24:19,866 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:24:19,867 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:24:19,867 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:24:19,867 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:24:19,868 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:24:19,868 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:24:19,868 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:24:19,869 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:24:19,869 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:24:19,871 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:24:19,884 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:24:19,884 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:24:19,884 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:24:19,884 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:24:19,885 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:24:19,885 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:24:19,885 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:24:19,886 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:19,886 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:24:19,886 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:24:19,887 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:24:19,887 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:24:19,888 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:24:20,076 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:24:20,093 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:24:20,095 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:24:20,096 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:24:20,096 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:24:20,097 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c [2022-01-10 12:24:20,134 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19aaeb52f/9455ebf753aa40f98bac6fded74868c2/FLAG337328622 [2022-01-10 12:24:20,489 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:24:20,489 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c [2022-01-10 12:24:20,503 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19aaeb52f/9455ebf753aa40f98bac6fded74868c2/FLAG337328622 [2022-01-10 12:24:20,858 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19aaeb52f/9455ebf753aa40f98bac6fded74868c2 [2022-01-10 12:24:20,860 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:24:20,862 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:24:20,863 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:20,863 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:24:20,866 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:24:20,866 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:20" (1/1) ... [2022-01-10 12:24:20,867 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49b79caf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:20, skipping insertion in model container [2022-01-10 12:24:20,867 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:20" (1/1) ... [2022-01-10 12:24:20,871 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:24:20,893 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:21,262 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-10 12:24:21,293 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:21,319 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:24:21,332 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:21,420 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-10 12:24:21,422 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:21,443 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:24:21,507 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-10 12:24:21,509 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:21,523 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:24:21,523 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21 WrapperNode [2022-01-10 12:24:21,523 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:21,524 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:21,524 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:24:21,524 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:24:21,529 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,553 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,579 INFO L137 Inliner]: procedures = 58, calls = 157, calls flagged for inlining = 54, calls inlined = 81, statements flattened = 607 [2022-01-10 12:24:21,580 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:21,580 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:24:21,580 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:24:21,580 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:24:21,587 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,587 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,594 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,594 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,601 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,614 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,616 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,618 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:24:21,618 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:24:21,618 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:24:21,618 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:24:21,631 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (1/1) ... [2022-01-10 12:24:21,636 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:21,643 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:21,653 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:24:21,661 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:24:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:24:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:24:21,685 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:24:21,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:24:21,738 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:24:21,739 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:24:22,030 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:24:22,042 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:24:22,042 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:24:22,044 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:22 BoogieIcfgContainer [2022-01-10 12:24:22,044 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:24:22,045 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:24:22,045 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:24:22,046 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:24:22,049 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:22" (1/1) ... [2022-01-10 12:24:22,201 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:22 BasicIcfg [2022-01-10 12:24:22,201 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:24:22,202 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:24:22,202 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:24:22,209 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:24:22,210 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:24:20" (1/4) ... [2022-01-10 12:24:22,210 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@735a5c1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:22, skipping insertion in model container [2022-01-10 12:24:22,210 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:21" (2/4) ... [2022-01-10 12:24:22,211 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@735a5c1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:22, skipping insertion in model container [2022-01-10 12:24:22,211 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:22" (3/4) ... [2022-01-10 12:24:22,211 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@735a5c1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:22, skipping insertion in model container [2022-01-10 12:24:22,211 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:22" (4/4) ... [2022-01-10 12:24:22,212 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product40.cil.cTransformedIcfg [2022-01-10 12:24:22,218 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:24:22,218 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:24:22,261 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:24:22,268 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:24:22,268 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:24:22,280 INFO L276 IsEmpty]: Start isEmpty. Operand has 168 states, 164 states have (on average 1.396341463414634) internal successors, (229), 167 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:24:22,285 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,285 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,286 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,289 INFO L85 PathProgramCache]: Analyzing trace with hash 1261639771, now seen corresponding path program 1 times [2022-01-10 12:24:22,295 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,295 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1108961087] [2022-01-10 12:24:22,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,296 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:22,511 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1108961087] [2022-01-10 12:24:22,512 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1108961087] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,512 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,512 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:22,513 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401654454] [2022-01-10 12:24:22,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,518 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:24:22,518 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:24:22,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:22,547 INFO L87 Difference]: Start difference. First operand has 168 states, 164 states have (on average 1.396341463414634) internal successors, (229), 167 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,595 INFO L93 Difference]: Finished difference Result 325 states and 446 transitions. [2022-01-10 12:24:22,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:24:22,598 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:24:22,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,607 INFO L225 Difference]: With dead ends: 325 [2022-01-10 12:24:22,607 INFO L226 Difference]: Without dead ends: 158 [2022-01-10 12:24:22,610 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:22,613 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,614 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-01-10 12:24:22,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 158. [2022-01-10 12:24:22,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 155 states have (on average 1.3612903225806452) internal successors, (211), 157 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 211 transitions. [2022-01-10 12:24:22,664 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 211 transitions. Word has length 19 [2022-01-10 12:24:22,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,665 INFO L470 AbstractCegarLoop]: Abstraction has 158 states and 211 transitions. [2022-01-10 12:24:22,665 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,666 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 211 transitions. [2022-01-10 12:24:22,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:24:22,667 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,667 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,667 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:24:22,668 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,669 INFO L85 PathProgramCache]: Analyzing trace with hash -1373418798, now seen corresponding path program 1 times [2022-01-10 12:24:22,669 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090316252] [2022-01-10 12:24:22,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,670 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:22,769 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090316252] [2022-01-10 12:24:22,769 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090316252] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,769 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,769 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:22,770 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [810968053] [2022-01-10 12:24:22,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,771 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:22,771 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:22,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,775 INFO L87 Difference]: Start difference. First operand 158 states and 211 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:22,823 INFO L93 Difference]: Finished difference Result 372 states and 501 transitions. [2022-01-10 12:24:22,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:22,824 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:24:22,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:22,826 INFO L225 Difference]: With dead ends: 372 [2022-01-10 12:24:22,826 INFO L226 Difference]: Without dead ends: 222 [2022-01-10 12:24:22,827 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,827 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 193 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:22,828 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:22,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-01-10 12:24:22,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 213. [2022-01-10 12:24:22,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 210 states have (on average 1.3714285714285714) internal successors, (288), 212 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 288 transitions. [2022-01-10 12:24:22,841 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 288 transitions. Word has length 20 [2022-01-10 12:24:22,842 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:22,842 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 288 transitions. [2022-01-10 12:24:22,843 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:22,844 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 288 transitions. [2022-01-10 12:24:22,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 12:24:22,849 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:22,849 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:22,850 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:24:22,850 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:22,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:22,850 INFO L85 PathProgramCache]: Analyzing trace with hash 1667718595, now seen corresponding path program 1 times [2022-01-10 12:24:22,850 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:22,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494187737] [2022-01-10 12:24:22,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:22,851 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:22,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:22,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:22,919 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:22,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494187737] [2022-01-10 12:24:22,919 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494187737] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:22,919 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:22,919 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:22,920 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677681555] [2022-01-10 12:24:22,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:22,920 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:22,920 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:22,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:22,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:22,921 INFO L87 Difference]: Start difference. First operand 213 states and 288 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,001 INFO L93 Difference]: Finished difference Result 478 states and 645 transitions. [2022-01-10 12:24:23,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:23,002 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 12:24:23,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,004 INFO L225 Difference]: With dead ends: 478 [2022-01-10 12:24:23,004 INFO L226 Difference]: Without dead ends: 273 [2022-01-10 12:24:23,009 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,012 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 141 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,013 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 316 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:23,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2022-01-10 12:24:23,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 267. [2022-01-10 12:24:23,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 264 states have (on average 1.321969696969697) internal successors, (349), 266 states have internal predecessors, (349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 349 transitions. [2022-01-10 12:24:23,054 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 349 transitions. Word has length 25 [2022-01-10 12:24:23,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,054 INFO L470 AbstractCegarLoop]: Abstraction has 267 states and 349 transitions. [2022-01-10 12:24:23,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,054 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 349 transitions. [2022-01-10 12:24:23,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 12:24:23,055 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:23,055 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:23,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:24:23,055 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:23,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:23,055 INFO L85 PathProgramCache]: Analyzing trace with hash -497802192, now seen corresponding path program 1 times [2022-01-10 12:24:23,056 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:23,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [710206507] [2022-01-10 12:24:23,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:23,056 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:23,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:23,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:23,125 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:23,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [710206507] [2022-01-10 12:24:23,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [710206507] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:23,125 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:23,125 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:23,125 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1278671816] [2022-01-10 12:24:23,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:23,126 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:23,127 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:23,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:23,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,128 INFO L87 Difference]: Start difference. First operand 267 states and 349 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,169 INFO L93 Difference]: Finished difference Result 526 states and 690 transitions. [2022-01-10 12:24:23,169 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:23,169 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 12:24:23,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,172 INFO L225 Difference]: With dead ends: 526 [2022-01-10 12:24:23,172 INFO L226 Difference]: Without dead ends: 520 [2022-01-10 12:24:23,172 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,177 INFO L933 BasicCegarLoop]: 202 mSDtfsCounter, 167 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,178 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [167 Valid, 387 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:23,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2022-01-10 12:24:23,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 520. [2022-01-10 12:24:23,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 520 states, 517 states have (on average 1.311411992263056) internal successors, (678), 519 states have internal predecessors, (678), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 520 states to 520 states and 678 transitions. [2022-01-10 12:24:23,207 INFO L78 Accepts]: Start accepts. Automaton has 520 states and 678 transitions. Word has length 30 [2022-01-10 12:24:23,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,208 INFO L470 AbstractCegarLoop]: Abstraction has 520 states and 678 transitions. [2022-01-10 12:24:23,208 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,208 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 678 transitions. [2022-01-10 12:24:23,213 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 12:24:23,213 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:23,213 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:23,214 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:24:23,214 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:23,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:23,214 INFO L85 PathProgramCache]: Analyzing trace with hash -544698291, now seen corresponding path program 1 times [2022-01-10 12:24:23,214 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:23,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895002970] [2022-01-10 12:24:23,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:23,215 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:23,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:23,260 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:23,261 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:23,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895002970] [2022-01-10 12:24:23,261 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895002970] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:23,261 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:23,261 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:23,261 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1570190859] [2022-01-10 12:24:23,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:23,262 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:23,262 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:23,262 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:23,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,262 INFO L87 Difference]: Start difference. First operand 520 states and 678 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,282 INFO L93 Difference]: Finished difference Result 520 states and 678 transitions. [2022-01-10 12:24:23,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:23,282 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 12:24:23,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,284 INFO L225 Difference]: With dead ends: 520 [2022-01-10 12:24:23,284 INFO L226 Difference]: Without dead ends: 234 [2022-01-10 12:24:23,284 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:23,285 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 58 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,285 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 95 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:23,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-01-10 12:24:23,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 234. [2022-01-10 12:24:23,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 233 states have (on average 1.3304721030042919) internal successors, (310), 233 states have internal predecessors, (310), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 310 transitions. [2022-01-10 12:24:23,302 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 310 transitions. Word has length 43 [2022-01-10 12:24:23,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,302 INFO L470 AbstractCegarLoop]: Abstraction has 234 states and 310 transitions. [2022-01-10 12:24:23,303 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,303 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 310 transitions. [2022-01-10 12:24:23,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-01-10 12:24:23,305 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:23,305 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:23,305 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:24:23,305 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:23,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:23,306 INFO L85 PathProgramCache]: Analyzing trace with hash -532554927, now seen corresponding path program 1 times [2022-01-10 12:24:23,306 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:23,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872665523] [2022-01-10 12:24:23,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:23,306 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:23,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:23,381 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 12:24:23,381 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:23,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872665523] [2022-01-10 12:24:23,382 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872665523] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:23,382 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:23,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:23,382 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1153738020] [2022-01-10 12:24:23,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:23,382 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:23,382 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:23,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:23,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:23,383 INFO L87 Difference]: Start difference. First operand 234 states and 310 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,473 INFO L93 Difference]: Finished difference Result 904 states and 1194 transitions. [2022-01-10 12:24:23,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:24:23,474 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-01-10 12:24:23,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,477 INFO L225 Difference]: With dead ends: 904 [2022-01-10 12:24:23,477 INFO L226 Difference]: Without dead ends: 678 [2022-01-10 12:24:23,478 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:23,479 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 357 mSDsluCounter, 410 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,479 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [357 Valid, 534 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:23,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2022-01-10 12:24:23,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 337. [2022-01-10 12:24:23,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 336 states have (on average 1.3125) internal successors, (441), 336 states have internal predecessors, (441), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 441 transitions. [2022-01-10 12:24:23,515 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 441 transitions. Word has length 50 [2022-01-10 12:24:23,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,515 INFO L470 AbstractCegarLoop]: Abstraction has 337 states and 441 transitions. [2022-01-10 12:24:23,515 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,515 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 441 transitions. [2022-01-10 12:24:23,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-01-10 12:24:23,531 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:23,532 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:23,532 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:24:23,532 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:23,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:23,532 INFO L85 PathProgramCache]: Analyzing trace with hash -2064484776, now seen corresponding path program 1 times [2022-01-10 12:24:23,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:23,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1405349916] [2022-01-10 12:24:23,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:23,533 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:23,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:23,632 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 12:24:23,632 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:23,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1405349916] [2022-01-10 12:24:23,632 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1405349916] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:23,632 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:23,632 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:23,632 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289442559] [2022-01-10 12:24:23,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:23,633 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:23,633 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:23,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:23,634 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:23,634 INFO L87 Difference]: Start difference. First operand 337 states and 441 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:23,766 INFO L93 Difference]: Finished difference Result 826 states and 1076 transitions. [2022-01-10 12:24:23,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:23,767 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-01-10 12:24:23,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:23,769 INFO L225 Difference]: With dead ends: 826 [2022-01-10 12:24:23,769 INFO L226 Difference]: Without dead ends: 497 [2022-01-10 12:24:23,769 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:23,770 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 172 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:23,770 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 363 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:23,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2022-01-10 12:24:23,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 283. [2022-01-10 12:24:23,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 282 states have (on average 1.301418439716312) internal successors, (367), 282 states have internal predecessors, (367), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 367 transitions. [2022-01-10 12:24:23,807 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 367 transitions. Word has length 52 [2022-01-10 12:24:23,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:23,824 INFO L470 AbstractCegarLoop]: Abstraction has 283 states and 367 transitions. [2022-01-10 12:24:23,824 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:23,824 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 367 transitions. [2022-01-10 12:24:23,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 12:24:23,825 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:23,825 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:23,825 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:24:23,826 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:23,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:23,826 INFO L85 PathProgramCache]: Analyzing trace with hash 1862694506, now seen corresponding path program 1 times [2022-01-10 12:24:23,826 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:23,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2057702927] [2022-01-10 12:24:23,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:23,826 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:23,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:23,939 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:23,940 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:23,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2057702927] [2022-01-10 12:24:23,940 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2057702927] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:23,940 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:23,940 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:23,940 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [692258473] [2022-01-10 12:24:23,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:23,941 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:23,941 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:23,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:23,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:23,941 INFO L87 Difference]: Start difference. First operand 283 states and 367 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:24,015 INFO L93 Difference]: Finished difference Result 786 states and 1012 transitions. [2022-01-10 12:24:24,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:24:24,016 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 12:24:24,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:24,017 INFO L225 Difference]: With dead ends: 786 [2022-01-10 12:24:24,017 INFO L226 Difference]: Without dead ends: 511 [2022-01-10 12:24:24,018 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:24,018 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 174 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:24,018 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [174 Valid, 441 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:24,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2022-01-10 12:24:24,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 295. [2022-01-10 12:24:24,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295 states, 294 states have (on average 1.2891156462585034) internal successors, (379), 294 states have internal predecessors, (379), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295 states to 295 states and 379 transitions. [2022-01-10 12:24:24,041 INFO L78 Accepts]: Start accepts. Automaton has 295 states and 379 transitions. Word has length 70 [2022-01-10 12:24:24,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:24,042 INFO L470 AbstractCegarLoop]: Abstraction has 295 states and 379 transitions. [2022-01-10 12:24:24,042 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,042 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 379 transitions. [2022-01-10 12:24:24,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 12:24:24,042 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:24,043 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:24,043 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:24:24,043 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:24,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:24,043 INFO L85 PathProgramCache]: Analyzing trace with hash 838000585, now seen corresponding path program 1 times [2022-01-10 12:24:24,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:24,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280395000] [2022-01-10 12:24:24,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:24,063 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:24,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:24,101 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:24,101 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:24,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280395000] [2022-01-10 12:24:24,101 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280395000] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:24,101 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:24,101 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:24,101 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210856286] [2022-01-10 12:24:24,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:24,102 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:24,102 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:24,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:24,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:24,102 INFO L87 Difference]: Start difference. First operand 295 states and 379 transitions. Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:24,167 INFO L93 Difference]: Finished difference Result 826 states and 1052 transitions. [2022-01-10 12:24:24,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:24,168 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 12:24:24,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:24,169 INFO L225 Difference]: With dead ends: 826 [2022-01-10 12:24:24,169 INFO L226 Difference]: Without dead ends: 539 [2022-01-10 12:24:24,170 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:24,170 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 147 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:24,170 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [147 Valid, 322 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:24,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2022-01-10 12:24:24,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 303. [2022-01-10 12:24:24,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 302 states have (on average 1.281456953642384) internal successors, (387), 302 states have internal predecessors, (387), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 387 transitions. [2022-01-10 12:24:24,194 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 387 transitions. Word has length 70 [2022-01-10 12:24:24,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:24,194 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 387 transitions. [2022-01-10 12:24:24,194 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,194 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 387 transitions. [2022-01-10 12:24:24,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 12:24:24,195 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:24,195 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:24,195 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:24:24,195 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:24,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:24,196 INFO L85 PathProgramCache]: Analyzing trace with hash -345346712, now seen corresponding path program 1 times [2022-01-10 12:24:24,196 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:24,196 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299019964] [2022-01-10 12:24:24,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:24,196 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:24,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:24,250 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:24,250 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:24,251 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299019964] [2022-01-10 12:24:24,251 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299019964] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:24,251 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:24,251 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:24:24,251 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887526319] [2022-01-10 12:24:24,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:24,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:24:24,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:24,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:24:24,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:24,252 INFO L87 Difference]: Start difference. First operand 303 states and 387 transitions. Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:24,473 INFO L93 Difference]: Finished difference Result 1227 states and 1568 transitions. [2022-01-10 12:24:24,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 12:24:24,473 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 12:24:24,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:24,476 INFO L225 Difference]: With dead ends: 1227 [2022-01-10 12:24:24,477 INFO L226 Difference]: Without dead ends: 932 [2022-01-10 12:24:24,477 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-10 12:24:24,478 INFO L933 BasicCegarLoop]: 256 mSDtfsCounter, 372 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 372 SdHoareTripleChecker+Valid, 1143 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:24,478 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [372 Valid, 1143 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:24,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 932 states. [2022-01-10 12:24:24,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 932 to 271. [2022-01-10 12:24:24,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 270 states have (on average 1.262962962962963) internal successors, (341), 270 states have internal predecessors, (341), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 341 transitions. [2022-01-10 12:24:24,512 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 341 transitions. Word has length 70 [2022-01-10 12:24:24,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:24,512 INFO L470 AbstractCegarLoop]: Abstraction has 271 states and 341 transitions. [2022-01-10 12:24:24,513 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,513 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 341 transitions. [2022-01-10 12:24:24,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-10 12:24:24,513 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:24,513 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:24,514 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:24:24,514 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:24,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:24,514 INFO L85 PathProgramCache]: Analyzing trace with hash -301650876, now seen corresponding path program 1 times [2022-01-10 12:24:24,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:24,515 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382912153] [2022-01-10 12:24:24,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:24,515 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:24,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:24,546 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:24,546 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:24,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382912153] [2022-01-10 12:24:24,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382912153] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:24,546 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:24,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:24,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901134118] [2022-01-10 12:24:24,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:24,547 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:24,547 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:24,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:24,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:24,547 INFO L87 Difference]: Start difference. First operand 271 states and 341 transitions. Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:24,581 INFO L93 Difference]: Finished difference Result 519 states and 656 transitions. [2022-01-10 12:24:24,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:24,581 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-10 12:24:24,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:24,582 INFO L225 Difference]: With dead ends: 519 [2022-01-10 12:24:24,582 INFO L226 Difference]: Without dead ends: 256 [2022-01-10 12:24:24,582 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:24,583 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 27 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:24,583 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 156 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:24,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-01-10 12:24:24,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 249. [2022-01-10 12:24:24,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 248 states have (on average 1.2298387096774193) internal successors, (305), 248 states have internal predecessors, (305), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 305 transitions. [2022-01-10 12:24:24,602 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 305 transitions. Word has length 71 [2022-01-10 12:24:24,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:24,602 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 305 transitions. [2022-01-10 12:24:24,602 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,603 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 305 transitions. [2022-01-10 12:24:24,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 12:24:24,606 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:24,606 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:24,606 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:24:24,607 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:24,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:24,607 INFO L85 PathProgramCache]: Analyzing trace with hash 2069984652, now seen corresponding path program 1 times [2022-01-10 12:24:24,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:24,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947760923] [2022-01-10 12:24:24,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:24,607 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:24,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:24,642 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-10 12:24:24,642 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:24,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947760923] [2022-01-10 12:24:24,642 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947760923] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:24,642 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:24,643 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:24,643 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144797478] [2022-01-10 12:24:24,643 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:24,643 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:24,643 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:24,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:24,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:24,644 INFO L87 Difference]: Start difference. First operand 249 states and 305 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:24,668 INFO L93 Difference]: Finished difference Result 475 states and 582 transitions. [2022-01-10 12:24:24,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:24,669 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 12:24:24,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:24,669 INFO L225 Difference]: With dead ends: 475 [2022-01-10 12:24:24,669 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:24:24,669 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:24,670 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 28 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:24,670 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 165 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:24,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:24:24,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:24:24,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:24:24,671 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 75 [2022-01-10 12:24:24,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:24,671 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:24:24,671 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:24,671 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:24:24,671 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:24:24,673 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:24:24,673 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:24:24,673 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:24:24,673 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-10 12:24:24,674 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:24:30,408 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:24:30,408 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:24:30,417 INFO L854 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:30,418 INFO L854 garLoopResultBuilder]: At program point L959(lines 955 961) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:30,418 INFO L854 garLoopResultBuilder]: At program point L974(lines 969 977) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:30,418 INFO L858 garLoopResultBuilder]: For program point L930(lines 930 937) no Hoare annotation was computed. [2022-01-10 12:24:30,418 INFO L854 garLoopResultBuilder]: At program point L903(lines 899 905) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:30,419 INFO L858 garLoopResultBuilder]: For program point L930-2(lines 930 937) no Hoare annotation was computed. [2022-01-10 12:24:30,419 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:30,419 INFO L861 garLoopResultBuilder]: At program point L939(lines 920 942) the Hoare annotation is: true [2022-01-10 12:24:30,420 INFO L854 garLoopResultBuilder]: At program point L206-2(lines 206 255) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse9 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9) (and .cse0 .cse11 .cse2 .cse7 .cse9))) [2022-01-10 12:24:30,420 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:24:30,420 INFO L854 garLoopResultBuilder]: At program point L256(lines 205 257) the Hoare annotation is: false [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L207(lines 206 255) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L275-3(lines 275 281) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L208(lines 208 212) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L104-3(lines 104 108) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L275-5(lines 274 293) no Hoare annotation was computed. [2022-01-10 12:24:30,421 INFO L858 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-01-10 12:24:30,422 INFO L854 garLoopResultBuilder]: At program point L104-5(lines 100 111) the Hoare annotation is: false [2022-01-10 12:24:30,422 INFO L858 garLoopResultBuilder]: For program point L333-2(lines 333 350) no Hoare annotation was computed. [2022-01-10 12:24:30,422 INFO L858 garLoopResultBuilder]: For program point L282-3(lines 282 288) no Hoare annotation was computed. [2022-01-10 12:24:30,422 INFO L858 garLoopResultBuilder]: For program point L116(lines 116 120) no Hoare annotation was computed. [2022-01-10 12:24:30,422 INFO L858 garLoopResultBuilder]: For program point L216-2(lines 216 222) no Hoare annotation was computed. [2022-01-10 12:24:30,422 INFO L854 garLoopResultBuilder]: At program point L141-2(lines 136 144) the Hoare annotation is: false [2022-01-10 12:24:30,422 INFO L858 garLoopResultBuilder]: For program point L307-6(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L141-3(lines 136 144) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L116-2(lines 112 123) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse9 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9) (and .cse0 .cse11 .cse2 .cse7 .cse9))) [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L226(lines 226 232) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L377-1(lines 370 380) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L181-3(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L299-7(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L70-2(lines 70 87) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L128(lines 128 132) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L226-2(lines 226 232) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L858 garLoopResultBuilder]: For program point L337-3(lines 337 345) no Hoare annotation was computed. [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L186-3(lines 177 190) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L307-7(lines 303 327) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L386-1(lines 381 389) the Hoare annotation is: false [2022-01-10 12:24:30,425 INFO L854 garLoopResultBuilder]: At program point L70-3(lines 62 90) the Hoare annotation is: false [2022-01-10 12:24:30,426 INFO L854 garLoopResultBuilder]: At program point L128-2(lines 124 135) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-10 12:24:30,426 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 251) no Hoare annotation was computed. [2022-01-10 12:24:30,426 INFO L854 garLoopResultBuilder]: At program point L367-2(lines 362 369) the Hoare annotation is: false [2022-01-10 12:24:30,426 INFO L858 garLoopResultBuilder]: For program point L307-4(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,426 INFO L858 garLoopResultBuilder]: For program point L435-9(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,426 INFO L854 garLoopResultBuilder]: At program point L333-3(lines 329 353) the Hoare annotation is: false [2022-01-10 12:24:30,426 INFO L858 garLoopResultBuilder]: For program point L74-2(lines 74 84) no Hoare annotation was computed. [2022-01-10 12:24:30,426 INFO L854 garLoopResultBuilder]: At program point L292-1(lines 271 294) the Hoare annotation is: false [2022-01-10 12:24:30,426 INFO L854 garLoopResultBuilder]: At program point L465(lines 460 467) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse5) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse5))) [2022-01-10 12:24:30,426 INFO L858 garLoopResultBuilder]: For program point L244(lines 244 250) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L858 garLoopResultBuilder]: For program point L181-2(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L854 garLoopResultBuilder]: At program point L299-5(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,427 INFO L858 garLoopResultBuilder]: For program point L435-11(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L858 garLoopResultBuilder]: For program point L75-3(lines 75 81) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L854 garLoopResultBuilder]: At program point L855-2(lines 855 869) the Hoare annotation is: false [2022-01-10 12:24:30,427 INFO L858 garLoopResultBuilder]: For program point L244-2(lines 236 251) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L858 garLoopResultBuilder]: For program point L449(lines 449 455) no Hoare annotation was computed. [2022-01-10 12:24:30,427 INFO L854 garLoopResultBuilder]: At program point L186-2(lines 177 190) the Hoare annotation is: false [2022-01-10 12:24:30,427 INFO L854 garLoopResultBuilder]: At program point L307-5(lines 303 327) the Hoare annotation is: false [2022-01-10 12:24:30,427 INFO L854 garLoopResultBuilder]: At program point L441-3(lines 426 444) the Hoare annotation is: false [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L839-1(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,428 INFO L861 garLoopResultBuilder]: At program point L870(lines 845 874) the Hoare annotation is: true [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L856(line 856) no Hoare annotation was computed. [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L275(lines 275 281) no Hoare annotation was computed. [2022-01-10 12:24:30,428 INFO L854 garLoopResultBuilder]: At program point L367(lines 362 369) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L449-2(lines 449 455) no Hoare annotation was computed. [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L435-6(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,428 INFO L858 garLoopResultBuilder]: For program point L311-9(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,429 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,429 INFO L854 garLoopResultBuilder]: At program point L840-1(lines 835 842) the Hoare annotation is: false [2022-01-10 12:24:30,429 INFO L861 garLoopResultBuilder]: At program point L261(lines 196 263) the Hoare annotation is: true [2022-01-10 12:24:30,429 INFO L858 garLoopResultBuilder]: For program point L859(lines 859 863) no Hoare annotation was computed. [2022-01-10 12:24:30,429 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2022-01-10 12:24:30,429 INFO L858 garLoopResultBuilder]: For program point L275-2(lines 274 293) no Hoare annotation was computed. [2022-01-10 12:24:30,430 INFO L854 garLoopResultBuilder]: At program point L457(lines 445 459) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:24:30,430 INFO L858 garLoopResultBuilder]: For program point L435-8(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,430 INFO L854 garLoopResultBuilder]: At program point L359-3(lines 354 361) the Hoare annotation is: false [2022-01-10 12:24:30,430 INFO L854 garLoopResultBuilder]: At program point L299-6(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,430 INFO L861 garLoopResultBuilder]: At program point L914(lines 906 916) the Hoare annotation is: true [2022-01-10 12:24:30,430 INFO L858 garLoopResultBuilder]: For program point L859-1(lines 859 863) no Hoare annotation was computed. [2022-01-10 12:24:30,430 INFO L854 garLoopResultBuilder]: At program point L104-2(lines 100 111) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-10 12:24:30,430 INFO L858 garLoopResultBuilder]: For program point L333(lines 333 350) no Hoare annotation was computed. [2022-01-10 12:24:30,430 INFO L858 garLoopResultBuilder]: For program point L282-1(lines 282 288) no Hoare annotation was computed. [2022-01-10 12:24:30,430 INFO L854 garLoopResultBuilder]: At program point L441-2(lines 426 444) the Hoare annotation is: false [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L275-6(lines 275 281) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L307-2(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L141-1(lines 136 144) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L311-6(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L104-6(lines 104 108) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L275-8(lines 274 293) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L377(lines 370 380) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L181-1(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L299-3(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L359-2(lines 354 361) the Hoare annotation is: false [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L299-4(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,431 INFO L854 garLoopResultBuilder]: At program point L104-8(lines 100 111) the Hoare annotation is: false [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L333-4(lines 333 350) no Hoare annotation was computed. [2022-01-10 12:24:30,431 INFO L858 garLoopResultBuilder]: For program point L282-5(lines 282 288) no Hoare annotation was computed. [2022-01-10 12:24:30,432 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 345) no Hoare annotation was computed. [2022-01-10 12:24:30,432 INFO L854 garLoopResultBuilder]: At program point L186-1(lines 177 190) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-10 12:24:30,432 INFO L854 garLoopResultBuilder]: At program point L307-3(lines 303 327) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:30,432 INFO L854 garLoopResultBuilder]: At program point L386(lines 381 389) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L70-1(lines 62 90) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse0 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9 .cse3))) [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L141-4(lines 136 144) the Hoare annotation is: false [2022-01-10 12:24:30,433 INFO L858 garLoopResultBuilder]: For program point L307-10(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L141-5(lines 136 144) the Hoare annotation is: false [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L367-1(lines 362 369) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 12:24:30,433 INFO L858 garLoopResultBuilder]: For program point L307(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,433 INFO L858 garLoopResultBuilder]: For program point L435-3(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L333-1(lines 329 353) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:30,433 INFO L858 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2022-01-10 12:24:30,433 INFO L854 garLoopResultBuilder]: At program point L292(lines 271 294) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse0 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9 .cse3))) [2022-01-10 12:24:30,434 INFO L854 garLoopResultBuilder]: At program point L377-2(lines 370 380) the Hoare annotation is: false [2022-01-10 12:24:30,434 INFO L858 garLoopResultBuilder]: For program point L181-5(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,434 INFO L854 garLoopResultBuilder]: At program point L299-11(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,434 INFO L858 garLoopResultBuilder]: For program point L70-4(lines 70 87) no Hoare annotation was computed. [2022-01-10 12:24:30,434 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,434 INFO L854 garLoopResultBuilder]: At program point L299-1(lines 295 301) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:30,435 INFO L858 garLoopResultBuilder]: For program point L435-5(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,435 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-01-10 12:24:30,435 INFO L858 garLoopResultBuilder]: For program point L337-6(lines 337 345) no Hoare annotation was computed. [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L186-5(lines 177 190) the Hoare annotation is: false [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L307-11(lines 303 327) the Hoare annotation is: false [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L386-2(lines 381 389) the Hoare annotation is: false [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L70-5(lines 62 90) the Hoare annotation is: false [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L186(lines 177 190) the Hoare annotation is: false [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L307-1(lines 303 327) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:30,435 INFO L854 garLoopResultBuilder]: At program point L441-1(lines 426 444) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int|)))) [2022-01-10 12:24:30,435 INFO L858 garLoopResultBuilder]: For program point L839(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,436 INFO L854 garLoopResultBuilder]: At program point L367-3(lines 362 369) the Hoare annotation is: false [2022-01-10 12:24:30,436 INFO L858 garLoopResultBuilder]: For program point L307-8(lines 307 324) no Hoare annotation was computed. [2022-01-10 12:24:30,436 INFO L858 garLoopResultBuilder]: For program point L435-15(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,436 INFO L854 garLoopResultBuilder]: At program point L333-5(lines 329 353) the Hoare annotation is: false [2022-01-10 12:24:30,436 INFO L858 garLoopResultBuilder]: For program point L74-4(lines 74 84) no Hoare annotation was computed. [2022-01-10 12:24:30,436 INFO L854 garLoopResultBuilder]: At program point L292-2(lines 271 294) the Hoare annotation is: false [2022-01-10 12:24:30,436 INFO L858 garLoopResultBuilder]: For program point L435(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L311-3(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L840(lines 835 842) the Hoare annotation is: false [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L181-4(lines 181 187) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L299-9(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L435-17(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L75-6(lines 75 81) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L435-2(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L359-1(lines 354 361) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L299-2(lines 295 301) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L186-4(lines 177 190) the Hoare annotation is: false [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L307-9(lines 303 327) the Hoare annotation is: false [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L441-5(lines 426 444) the Hoare annotation is: false [2022-01-10 12:24:30,437 INFO L858 garLoopResultBuilder]: For program point L839-2(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,437 INFO L854 garLoopResultBuilder]: At program point L441(lines 426 444) the Hoare annotation is: false [2022-01-10 12:24:30,438 INFO L858 garLoopResultBuilder]: For program point L435-12(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,438 INFO L858 garLoopResultBuilder]: For program point L311-15(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,438 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-10 12:24:30,438 INFO L854 garLoopResultBuilder]: At program point L840-2(lines 835 842) the Hoare annotation is: false [2022-01-10 12:24:30,438 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,439 INFO L858 garLoopResultBuilder]: For program point L435-14(lines 435 439) no Hoare annotation was computed. [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L359-5(lines 354 361) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L299-10(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L359(lines 354 361) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L299(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L441-4(lines 426 444) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L858 garLoopResultBuilder]: For program point L311-12(lines 311 319) no Hoare annotation was computed. [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L359-4(lines 354 361) the Hoare annotation is: false [2022-01-10 12:24:30,439 INFO L854 garLoopResultBuilder]: At program point L299-8(lines 295 301) the Hoare annotation is: false [2022-01-10 12:24:30,441 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,442 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:24:30,538 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:30 BasicIcfg [2022-01-10 12:24:30,538 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:24:30,539 INFO L158 Benchmark]: Toolchain (without parser) took 9676.21ms. Allocated memory was 160.4MB in the beginning and 287.3MB in the end (delta: 126.9MB). Free memory was 108.3MB in the beginning and 229.5MB in the end (delta: -121.2MB). Peak memory consumption was 148.0MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,539 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 160.4MB. Free memory is still 125.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:24:30,539 INFO L158 Benchmark]: CACSL2BoogieTranslator took 660.03ms. Allocated memory was 160.4MB in the beginning and 192.9MB in the end (delta: 32.5MB). Free memory was 108.0MB in the beginning and 155.4MB in the end (delta: -47.4MB). Peak memory consumption was 12.2MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,539 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.84ms. Allocated memory is still 192.9MB. Free memory was 155.4MB in the beginning and 151.7MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,539 INFO L158 Benchmark]: Boogie Preprocessor took 37.52ms. Allocated memory is still 192.9MB. Free memory was 151.7MB in the beginning and 149.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,539 INFO L158 Benchmark]: RCFGBuilder took 426.04ms. Allocated memory is still 192.9MB. Free memory was 149.6MB in the beginning and 126.0MB in the end (delta: 23.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,540 INFO L158 Benchmark]: IcfgTransformer took 156.11ms. Allocated memory is still 192.9MB. Free memory was 126.0MB in the beginning and 117.1MB in the end (delta: 8.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,540 INFO L158 Benchmark]: TraceAbstraction took 8336.08ms. Allocated memory was 192.9MB in the beginning and 287.3MB in the end (delta: 94.4MB). Free memory was 116.6MB in the beginning and 229.5MB in the end (delta: -112.9MB). Peak memory consumption was 123.5MB. Max. memory is 8.0GB. [2022-01-10 12:24:30,541 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 160.4MB. Free memory is still 125.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 660.03ms. Allocated memory was 160.4MB in the beginning and 192.9MB in the end (delta: 32.5MB). Free memory was 108.0MB in the beginning and 155.4MB in the end (delta: -47.4MB). Peak memory consumption was 12.2MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 55.84ms. Allocated memory is still 192.9MB. Free memory was 155.4MB in the beginning and 151.7MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 37.52ms. Allocated memory is still 192.9MB. Free memory was 151.7MB in the beginning and 149.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 426.04ms. Allocated memory is still 192.9MB. Free memory was 149.6MB in the beginning and 126.0MB in the end (delta: 23.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 156.11ms. Allocated memory is still 192.9MB. Free memory was 126.0MB in the beginning and 117.1MB in the end (delta: 8.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. * TraceAbstraction took 8336.08ms. Allocated memory was 192.9MB in the beginning and 287.3MB in the end (delta: 94.4MB). Free memory was 116.6MB in the beginning and 229.5MB in the end (delta: -112.9MB). Peak memory consumption was 123.5MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 168 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 8.2s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1836 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1836 mSDsluCounter, 4441 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2544 mSDsCounter, 88 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 268 IncrementalHoareTripleChecker+Invalid, 356 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 88 mSolverCounterUnsat, 1897 mSDtfsCounter, 268 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=520occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1690 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 83 LocationsWithAnnotation, 83 PreInvPairs, 170 NumberOfFragments, 1881 HoareAnnotationTreeSize, 83 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 83 FomulaSimplificationsInter, 277599 FormulaSimplificationTreeSizeReductionInter, 4.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 595 NumberOfCodeBlocks, 595 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 583 ConstructedInterpolants, 0 QuantifiedInterpolants, 1146 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 155/155 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 206]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 112]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 205]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 124]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-01-10 12:24:30,597 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...