/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:14:24,329 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:14:24,331 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:14:24,368 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:14:24,368 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:14:24,371 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:14:24,373 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:14:24,375 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:14:24,376 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:14:24,379 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:14:24,380 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:14:24,381 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:14:24,381 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:14:24,382 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:14:24,383 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:14:24,386 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:14:24,386 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:14:24,387 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:14:24,388 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:14:24,393 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:14:24,393 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:14:24,394 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:14:24,395 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:14:24,396 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:14:24,401 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:14:24,401 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:14:24,401 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:14:24,402 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:14:24,403 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:14:24,403 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:14:24,404 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:14:24,404 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:14:24,405 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:14:24,406 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:14:24,407 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:14:24,407 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:14:24,407 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:14:24,408 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:14:24,408 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:14:24,408 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:14:24,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:14:24,409 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:14:24,436 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:14:24,437 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:14:24,437 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:14:24,437 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:14:24,438 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:14:24,438 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:14:24,438 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:14:24,438 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:14:24,439 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:14:24,439 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:14:24,439 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:14:24,439 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:14:24,440 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:14:24,440 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:24,441 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:14:24,441 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:14:24,442 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:14:24,442 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:14:24,442 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:14:24,442 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:14:24,443 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:14:24,443 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:14:24,635 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:14:24,661 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:14:24,664 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:14:24,665 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:14:24,668 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:14:24,670 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-10 18:14:24,758 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ce6b4e61c/a28c885959b5405098556ce959fe54b4/FLAGcf9b3ca52 [2022-01-10 18:14:25,311 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:14:25,311 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-10 18:14:25,323 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ce6b4e61c/a28c885959b5405098556ce959fe54b4/FLAGcf9b3ca52 [2022-01-10 18:14:25,664 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ce6b4e61c/a28c885959b5405098556ce959fe54b4 [2022-01-10 18:14:25,668 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:14:25,670 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:14:25,671 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:25,671 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:14:25,700 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:14:25,704 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:25" (1/1) ... [2022-01-10 18:14:25,705 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@775703c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:25, skipping insertion in model container [2022-01-10 18:14:25,705 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:25" (1/1) ... [2022-01-10 18:14:25,712 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:14:25,743 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:25,940 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 18:14:26,029 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:26,047 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:14:26,055 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:26,068 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 18:14:26,097 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:26,112 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:14:26,167 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-10 18:14:26,195 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:26,213 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:14:26,214 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26 WrapperNode [2022-01-10 18:14:26,214 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:26,215 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:26,215 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:14:26,215 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:14:26,222 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,251 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,282 INFO L137 Inliner]: procedures = 57, calls = 156, calls flagged for inlining = 53, calls inlined = 80, statements flattened = 604 [2022-01-10 18:14:26,283 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:26,283 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:14:26,283 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:14:26,283 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:14:26,291 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,291 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,294 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,299 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,313 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,322 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,324 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,328 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:14:26,330 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:14:26,330 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:14:26,330 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:14:26,337 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (1/1) ... [2022-01-10 18:14:26,353 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:26,364 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:14:26,376 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:14:26,421 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:14:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:14:26,471 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:14:26,472 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:14:26,477 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:14:26,629 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:14:26,631 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:14:27,503 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:14:27,510 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:14:27,510 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:14:27,514 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:27 BoogieIcfgContainer [2022-01-10 18:14:27,514 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:14:27,515 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:14:27,515 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:14:27,523 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:14:27,526 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:27" (1/1) ... [2022-01-10 18:14:27,805 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:27 BasicIcfg [2022-01-10 18:14:27,806 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:14:27,807 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:14:27,807 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:14:27,809 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:14:27,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:14:25" (1/4) ... [2022-01-10 18:14:27,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36dfb67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:27, skipping insertion in model container [2022-01-10 18:14:27,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:26" (2/4) ... [2022-01-10 18:14:27,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36dfb67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:27, skipping insertion in model container [2022-01-10 18:14:27,811 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:27" (3/4) ... [2022-01-10 18:14:27,811 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36dfb67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:27, skipping insertion in model container [2022-01-10 18:14:27,813 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:27" (4/4) ... [2022-01-10 18:14:27,814 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.cTransformedIcfg [2022-01-10 18:14:27,825 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:14:27,826 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:14:27,917 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:14:27,922 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:14:27,923 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:14:27,969 INFO L276 IsEmpty]: Start isEmpty. Operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:28,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 18:14:28,006 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:28,007 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:28,007 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:28,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:28,012 INFO L85 PathProgramCache]: Analyzing trace with hash -429092198, now seen corresponding path program 1 times [2022-01-10 18:14:28,034 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:28,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1362522722] [2022-01-10 18:14:28,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:28,036 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:28,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:28,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:28,481 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:28,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1362522722] [2022-01-10 18:14:28,486 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1362522722] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:28,486 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:28,487 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:28,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [868894907] [2022-01-10 18:14:28,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:28,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:14:28,510 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:28,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:14:28,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:28,561 INFO L87 Difference]: Start difference. First operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:28,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:28,659 INFO L93 Difference]: Finished difference Result 323 states and 444 transitions. [2022-01-10 18:14:28,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:14:28,662 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 18:14:28,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:28,671 INFO L225 Difference]: With dead ends: 323 [2022-01-10 18:14:28,672 INFO L226 Difference]: Without dead ends: 157 [2022-01-10 18:14:28,675 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:28,689 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:28,690 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:28,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-01-10 18:14:28,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-01-10 18:14:28,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.3636363636363635) internal successors, (210), 156 states have internal predecessors, (210), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:28,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 210 transitions. [2022-01-10 18:14:28,750 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 210 transitions. Word has length 19 [2022-01-10 18:14:28,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:28,750 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 210 transitions. [2022-01-10 18:14:28,750 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:28,752 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 210 transitions. [2022-01-10 18:14:28,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 18:14:28,753 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:28,753 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:28,753 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:14:28,754 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:28,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:28,756 INFO L85 PathProgramCache]: Analyzing trace with hash 2048464979, now seen corresponding path program 1 times [2022-01-10 18:14:28,757 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:28,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594614789] [2022-01-10 18:14:28,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:28,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:28,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:28,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:28,922 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:28,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594614789] [2022-01-10 18:14:28,922 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594614789] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:28,922 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:28,922 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:28,922 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1804233434] [2022-01-10 18:14:28,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:28,923 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:28,923 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:28,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:28,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:28,924 INFO L87 Difference]: Start difference. First operand 157 states and 210 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:28,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:28,978 INFO L93 Difference]: Finished difference Result 370 states and 499 transitions. [2022-01-10 18:14:28,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:28,980 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 18:14:28,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:28,982 INFO L225 Difference]: With dead ends: 370 [2022-01-10 18:14:28,982 INFO L226 Difference]: Without dead ends: 221 [2022-01-10 18:14:28,983 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:28,984 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 193 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:28,984 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:28,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-01-10 18:14:29,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 212. [2022-01-10 18:14:29,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 209 states have (on average 1.3732057416267942) internal successors, (287), 211 states have internal predecessors, (287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 287 transitions. [2022-01-10 18:14:29,014 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 287 transitions. Word has length 20 [2022-01-10 18:14:29,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,015 INFO L470 AbstractCegarLoop]: Abstraction has 212 states and 287 transitions. [2022-01-10 18:14:29,015 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,015 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 287 transitions. [2022-01-10 18:14:29,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 18:14:29,016 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,016 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,016 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:14:29,016 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,017 INFO L85 PathProgramCache]: Analyzing trace with hash 1951981762, now seen corresponding path program 1 times [2022-01-10 18:14:29,017 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,017 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133008606] [2022-01-10 18:14:29,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,017 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,053 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:29,053 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133008606] [2022-01-10 18:14:29,054 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133008606] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,054 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,054 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:29,055 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1840965915] [2022-01-10 18:14:29,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,055 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:29,055 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,056 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:29,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,056 INFO L87 Difference]: Start difference. First operand 212 states and 287 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,116 INFO L93 Difference]: Finished difference Result 475 states and 642 transitions. [2022-01-10 18:14:29,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:29,117 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 18:14:29,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,118 INFO L225 Difference]: With dead ends: 475 [2022-01-10 18:14:29,118 INFO L226 Difference]: Without dead ends: 271 [2022-01-10 18:14:29,119 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,120 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 141 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,120 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 295 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-01-10 18:14:29,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 265. [2022-01-10 18:14:29,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 264 states have internal predecessors, (347), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 347 transitions. [2022-01-10 18:14:29,134 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 347 transitions. Word has length 25 [2022-01-10 18:14:29,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,134 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 347 transitions. [2022-01-10 18:14:29,134 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,134 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 347 transitions. [2022-01-10 18:14:29,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 18:14:29,135 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,135 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,135 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:14:29,135 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,136 INFO L85 PathProgramCache]: Analyzing trace with hash -582203850, now seen corresponding path program 1 times [2022-01-10 18:14:29,136 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119965367] [2022-01-10 18:14:29,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,136 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:29,175 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1119965367] [2022-01-10 18:14:29,175 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1119965367] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,175 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,175 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:29,176 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [526994892] [2022-01-10 18:14:29,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,176 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:29,176 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:29,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,177 INFO L87 Difference]: Start difference. First operand 265 states and 347 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,213 INFO L93 Difference]: Finished difference Result 522 states and 686 transitions. [2022-01-10 18:14:29,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:29,213 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 18:14:29,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,216 INFO L225 Difference]: With dead ends: 522 [2022-01-10 18:14:29,217 INFO L226 Difference]: Without dead ends: 516 [2022-01-10 18:14:29,217 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,218 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 166 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,219 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 385 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2022-01-10 18:14:29,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 516. [2022-01-10 18:14:29,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 513 states have (on average 1.3138401559454191) internal successors, (674), 515 states have internal predecessors, (674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 674 transitions. [2022-01-10 18:14:29,238 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 674 transitions. Word has length 30 [2022-01-10 18:14:29,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,239 INFO L470 AbstractCegarLoop]: Abstraction has 516 states and 674 transitions. [2022-01-10 18:14:29,239 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,239 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 674 transitions. [2022-01-10 18:14:29,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 18:14:29,241 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,241 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,241 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:14:29,242 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,242 INFO L85 PathProgramCache]: Analyzing trace with hash 714549505, now seen corresponding path program 1 times [2022-01-10 18:14:29,242 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134816565] [2022-01-10 18:14:29,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,243 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,296 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:29,297 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,297 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134816565] [2022-01-10 18:14:29,297 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134816565] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,297 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,297 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:29,297 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2048996691] [2022-01-10 18:14:29,297 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:29,298 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:29,298 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,299 INFO L87 Difference]: Start difference. First operand 516 states and 674 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,320 INFO L93 Difference]: Finished difference Result 516 states and 674 transitions. [2022-01-10 18:14:29,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:29,321 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 18:14:29,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,322 INFO L225 Difference]: With dead ends: 516 [2022-01-10 18:14:29,322 INFO L226 Difference]: Without dead ends: 230 [2022-01-10 18:14:29,323 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:29,324 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 57 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,325 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2022-01-10 18:14:29,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2022-01-10 18:14:29,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 229 states have (on average 1.3362445414847162) internal successors, (306), 229 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 306 transitions. [2022-01-10 18:14:29,343 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 306 transitions. Word has length 43 [2022-01-10 18:14:29,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,343 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 306 transitions. [2022-01-10 18:14:29,343 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,343 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 306 transitions. [2022-01-10 18:14:29,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-01-10 18:14:29,345 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,345 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,345 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:14:29,345 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,346 INFO L85 PathProgramCache]: Analyzing trace with hash 683143848, now seen corresponding path program 1 times [2022-01-10 18:14:29,346 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1778369171] [2022-01-10 18:14:29,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,346 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,400 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 18:14:29,400 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1778369171] [2022-01-10 18:14:29,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1778369171] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,400 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,400 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:29,401 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829223727] [2022-01-10 18:14:29,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,401 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:29,401 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:29,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:29,402 INFO L87 Difference]: Start difference. First operand 230 states and 306 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,526 INFO L93 Difference]: Finished difference Result 884 states and 1174 transitions. [2022-01-10 18:14:29,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:14:29,526 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-01-10 18:14:29,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,528 INFO L225 Difference]: With dead ends: 884 [2022-01-10 18:14:29,529 INFO L226 Difference]: Without dead ends: 662 [2022-01-10 18:14:29,529 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:14:29,530 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 352 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,530 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [352 Valid, 525 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2022-01-10 18:14:29,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 331. [2022-01-10 18:14:29,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 330 states have (on average 1.3181818181818181) internal successors, (435), 330 states have internal predecessors, (435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 435 transitions. [2022-01-10 18:14:29,557 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 435 transitions. Word has length 49 [2022-01-10 18:14:29,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,558 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 435 transitions. [2022-01-10 18:14:29,558 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,558 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 435 transitions. [2022-01-10 18:14:29,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 18:14:29,559 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,559 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,560 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:14:29,560 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,560 INFO L85 PathProgramCache]: Analyzing trace with hash -181742847, now seen corresponding path program 1 times [2022-01-10 18:14:29,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [861542] [2022-01-10 18:14:29,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,561 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,633 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 18:14:29,633 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [861542] [2022-01-10 18:14:29,633 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [861542] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,634 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,634 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:29,634 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828456927] [2022-01-10 18:14:29,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,634 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:29,634 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,635 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:29,635 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:29,635 INFO L87 Difference]: Start difference. First operand 331 states and 435 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,730 INFO L93 Difference]: Finished difference Result 811 states and 1061 transitions. [2022-01-10 18:14:29,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:29,730 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-01-10 18:14:29,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,732 INFO L225 Difference]: With dead ends: 811 [2022-01-10 18:14:29,732 INFO L226 Difference]: Without dead ends: 488 [2022-01-10 18:14:29,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:14:29,733 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 168 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,734 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 357 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-01-10 18:14:29,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 278. [2022-01-10 18:14:29,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 277 states have (on average 1.3068592057761732) internal successors, (362), 277 states have internal predecessors, (362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 362 transitions. [2022-01-10 18:14:29,762 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 362 transitions. Word has length 51 [2022-01-10 18:14:29,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,763 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 362 transitions. [2022-01-10 18:14:29,763 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,763 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 362 transitions. [2022-01-10 18:14:29,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 18:14:29,764 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,764 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,764 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:14:29,764 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,764 INFO L85 PathProgramCache]: Analyzing trace with hash 637933471, now seen corresponding path program 1 times [2022-01-10 18:14:29,765 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [806412386] [2022-01-10 18:14:29,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,765 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,813 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:29,813 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [806412386] [2022-01-10 18:14:29,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [806412386] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,813 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:14:29,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018868281] [2022-01-10 18:14:29,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:29,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:29,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:29,814 INFO L87 Difference]: Start difference. First operand 278 states and 362 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:29,887 INFO L93 Difference]: Finished difference Result 772 states and 998 transitions. [2022-01-10 18:14:29,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:14:29,887 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 18:14:29,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:29,889 INFO L225 Difference]: With dead ends: 772 [2022-01-10 18:14:29,889 INFO L226 Difference]: Without dead ends: 502 [2022-01-10 18:14:29,890 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:14:29,890 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 170 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:29,891 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [170 Valid, 434 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:29,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-01-10 18:14:29,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 290. [2022-01-10 18:14:29,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 289 states have (on average 1.2941176470588236) internal successors, (374), 289 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 374 transitions. [2022-01-10 18:14:29,914 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 374 transitions. Word has length 68 [2022-01-10 18:14:29,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:29,915 INFO L470 AbstractCegarLoop]: Abstraction has 290 states and 374 transitions. [2022-01-10 18:14:29,915 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:29,915 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 374 transitions. [2022-01-10 18:14:29,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 18:14:29,916 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:29,916 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:29,916 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:14:29,916 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:29,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:29,916 INFO L85 PathProgramCache]: Analyzing trace with hash 189236832, now seen corresponding path program 1 times [2022-01-10 18:14:29,916 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:29,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [632224114] [2022-01-10 18:14:29,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:29,917 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:29,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:29,953 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:29,953 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:29,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [632224114] [2022-01-10 18:14:29,953 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [632224114] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:29,953 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:29,953 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:29,954 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204144303] [2022-01-10 18:14:29,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:29,971 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:14:29,971 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:29,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:14:29,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:14:29,971 INFO L87 Difference]: Start difference. First operand 290 states and 374 transitions. Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:30,039 INFO L93 Difference]: Finished difference Result 812 states and 1038 transitions. [2022-01-10 18:14:30,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:30,040 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 18:14:30,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:30,041 INFO L225 Difference]: With dead ends: 812 [2022-01-10 18:14:30,041 INFO L226 Difference]: Without dead ends: 530 [2022-01-10 18:14:30,042 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:30,042 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 144 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:30,043 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 317 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:30,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-01-10 18:14:30,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 298. [2022-01-10 18:14:30,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 297 states have (on average 1.2861952861952861) internal successors, (382), 297 states have internal predecessors, (382), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 382 transitions. [2022-01-10 18:14:30,069 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 382 transitions. Word has length 68 [2022-01-10 18:14:30,069 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:30,069 INFO L470 AbstractCegarLoop]: Abstraction has 298 states and 382 transitions. [2022-01-10 18:14:30,069 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,069 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 382 transitions. [2022-01-10 18:14:30,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 18:14:30,070 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:30,070 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:30,070 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:14:30,071 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:30,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:30,071 INFO L85 PathProgramCache]: Analyzing trace with hash -1511503647, now seen corresponding path program 1 times [2022-01-10 18:14:30,071 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:30,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574973183] [2022-01-10 18:14:30,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:30,071 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:30,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:30,124 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:14:30,125 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:30,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574973183] [2022-01-10 18:14:30,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574973183] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:30,125 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:30,125 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 18:14:30,125 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1188968134] [2022-01-10 18:14:30,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:30,125 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:14:30,126 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:30,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:14:30,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:14:30,126 INFO L87 Difference]: Start difference. First operand 298 states and 382 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:30,322 INFO L93 Difference]: Finished difference Result 1184 states and 1525 transitions. [2022-01-10 18:14:30,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 18:14:30,323 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 18:14:30,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:30,326 INFO L225 Difference]: With dead ends: 1184 [2022-01-10 18:14:30,326 INFO L226 Difference]: Without dead ends: 894 [2022-01-10 18:14:30,327 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-10 18:14:30,327 INFO L933 BasicCegarLoop]: 251 mSDtfsCounter, 364 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 364 SdHoareTripleChecker+Valid, 1118 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:30,328 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [364 Valid, 1118 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:30,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2022-01-10 18:14:30,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 266. [2022-01-10 18:14:30,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 265 states have (on average 1.2679245283018867) internal successors, (336), 265 states have internal predecessors, (336), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 336 transitions. [2022-01-10 18:14:30,358 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 336 transitions. Word has length 68 [2022-01-10 18:14:30,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:30,359 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 336 transitions. [2022-01-10 18:14:30,359 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,359 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 336 transitions. [2022-01-10 18:14:30,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 18:14:30,360 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:30,360 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:30,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 18:14:30,360 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:30,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:30,360 INFO L85 PathProgramCache]: Analyzing trace with hash -1381747203, now seen corresponding path program 1 times [2022-01-10 18:14:30,360 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:30,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825265569] [2022-01-10 18:14:30,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:30,361 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:30,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:30,407 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:30,408 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:30,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825265569] [2022-01-10 18:14:30,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825265569] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:30,408 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:30,408 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:30,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646699911] [2022-01-10 18:14:30,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:30,409 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:30,409 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:30,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:30,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:30,409 INFO L87 Difference]: Start difference. First operand 266 states and 336 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:30,451 INFO L93 Difference]: Finished difference Result 509 states and 646 transitions. [2022-01-10 18:14:30,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:30,452 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 18:14:30,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:30,453 INFO L225 Difference]: With dead ends: 509 [2022-01-10 18:14:30,453 INFO L226 Difference]: Without dead ends: 251 [2022-01-10 18:14:30,454 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:30,454 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 27 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:30,454 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 153 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:30,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-01-10 18:14:30,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 245. [2022-01-10 18:14:30,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 244 states have (on average 1.2336065573770492) internal successors, (301), 244 states have internal predecessors, (301), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 301 transitions. [2022-01-10 18:14:30,478 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 301 transitions. Word has length 69 [2022-01-10 18:14:30,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:30,478 INFO L470 AbstractCegarLoop]: Abstraction has 245 states and 301 transitions. [2022-01-10 18:14:30,478 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,478 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 301 transitions. [2022-01-10 18:14:30,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 18:14:30,479 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:30,479 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:30,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:14:30,479 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:30,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:30,479 INFO L85 PathProgramCache]: Analyzing trace with hash -1490070595, now seen corresponding path program 1 times [2022-01-10 18:14:30,479 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:30,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989258869] [2022-01-10 18:14:30,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:30,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:30,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:30,505 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-10 18:14:30,505 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:30,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989258869] [2022-01-10 18:14:30,505 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989258869] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:30,506 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:30,506 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:30,506 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313192905] [2022-01-10 18:14:30,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:30,506 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:30,506 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:30,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:30,507 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:30,507 INFO L87 Difference]: Start difference. First operand 245 states and 301 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:30,534 INFO L93 Difference]: Finished difference Result 467 states and 574 transitions. [2022-01-10 18:14:30,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:30,534 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 18:14:30,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:30,534 INFO L225 Difference]: With dead ends: 467 [2022-01-10 18:14:30,534 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:14:30,535 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:30,535 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 29 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:30,536 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 164 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:30,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:14:30,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:14:30,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:14:30,536 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 74 [2022-01-10 18:14:30,536 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:30,536 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:14:30,536 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:30,537 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:14:30,537 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:14:30,538 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:14:30,539 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:14:30,539 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:14:30,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-10 18:14:30,540 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:14:35,838 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:14:35,838 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:14:35,839 INFO L854 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:35,839 INFO L854 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:35,839 INFO L854 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:35,839 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-01-10 18:14:35,839 INFO L854 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:35,839 INFO L858 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-01-10 18:14:35,840 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:35,840 INFO L861 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-01-10 18:14:35,840 INFO L854 garLoopResultBuilder]: At program point L316-2(lines 316 363) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 18:14:35,840 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:14:35,840 INFO L854 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-01-10 18:14:35,840 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-01-10 18:14:35,840 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:14:35,840 INFO L858 garLoopResultBuilder]: For program point L382-3(lines 382 388) no Hoare annotation was computed. [2022-01-10 18:14:35,841 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:35,841 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:14:35,841 INFO L858 garLoopResultBuilder]: For program point L382-5(lines 381 400) no Hoare annotation was computed. [2022-01-10 18:14:35,841 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-10 18:14:35,842 INFO L858 garLoopResultBuilder]: For program point L440-2(lines 440 457) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 395) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 332) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-10 18:14:35,842 INFO L858 garLoopResultBuilder]: For program point L414-6(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,842 INFO L854 garLoopResultBuilder]: At program point L100-3(lines 95 103) the Hoare annotation is: false [2022-01-10 18:14:35,843 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-01-10 18:14:35,843 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 477 487) the Hoare annotation is: false [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L140-3(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,843 INFO L854 garLoopResultBuilder]: At program point L406-7(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L274-2(lines 274 291) no Hoare annotation was computed. [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 342) no Hoare annotation was computed. [2022-01-10 18:14:35,843 INFO L858 garLoopResultBuilder]: For program point L444-3(lines 444 452) no Hoare annotation was computed. [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L145-3(lines 136 149) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L414-7(lines 410 434) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L493-1(lines 488 496) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L274-3(lines 266 294) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-10 18:14:35,844 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 469 476) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L858 garLoopResultBuilder]: For program point L414-4(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,844 INFO L858 garLoopResultBuilder]: For program point L542-9(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L440-3(lines 436 460) the Hoare annotation is: false [2022-01-10 18:14:35,844 INFO L858 garLoopResultBuilder]: For program point L278-2(lines 278 288) no Hoare annotation was computed. [2022-01-10 18:14:35,844 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 378 401) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 346 359) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L854 garLoopResultBuilder]: At program point L406-5(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L542-11(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L279-3(lines 279 285) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L382(lines 382 388) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L854 garLoopResultBuilder]: At program point L414-5(lines 410 434) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L854 garLoopResultBuilder]: At program point L548-3(lines 533 551) the Hoare annotation is: false [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L300-1(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L861 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-01-10 18:14:35,845 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L382-2(lines 381 400) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L854 garLoopResultBuilder]: At program point L474(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L556-2(lines 556 562) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L542-6(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L418-9(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L854 garLoopResultBuilder]: At program point L301-1(lines 296 303) the Hoare annotation is: false [2022-01-10 18:14:35,846 INFO L861 garLoopResultBuilder]: At program point L369(lines 306 371) the Hoare annotation is: true [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-01-10 18:14:35,846 INFO L858 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 18:14:35,847 INFO L858 garLoopResultBuilder]: For program point L542-8(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L466-3(lines 461 468) the Hoare annotation is: false [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L406-6(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,847 INFO L861 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-01-10 18:14:35,847 INFO L858 garLoopResultBuilder]: For program point L167-1(lines 167 171) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 18:14:35,847 INFO L858 garLoopResultBuilder]: For program point L414-2(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L548-2(lines 533 551) the Hoare annotation is: false [2022-01-10 18:14:35,847 INFO L858 garLoopResultBuilder]: For program point L382-6(lines 382 388) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 18:14:35,847 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,847 INFO L854 garLoopResultBuilder]: At program point L406-3(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,848 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-01-10 18:14:35,848 INFO L858 garLoopResultBuilder]: For program point L418-6(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,848 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:14:35,848 INFO L858 garLoopResultBuilder]: For program point L382-8(lines 381 400) no Hoare annotation was computed. [2022-01-10 18:14:35,848 INFO L858 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L414-3(lines 410 434) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L466-2(lines 461 468) the Hoare annotation is: false [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L406-4(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,848 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L440-4(lines 440 457) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 395) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 469 476) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~4#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L542-3(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L854 garLoopResultBuilder]: At program point L440-1(lines 436 460) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L854 garLoopResultBuilder]: At program point L399(lines 378 401) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-10 18:14:35,849 INFO L854 garLoopResultBuilder]: At program point L100-4(lines 95 103) the Hoare annotation is: false [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L414-10(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,849 INFO L854 garLoopResultBuilder]: At program point L100-5(lines 95 103) the Hoare annotation is: false [2022-01-10 18:14:35,849 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L406-1(lines 402 408) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L542-5(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 477 487) the Hoare annotation is: false [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L140-5(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L406-11(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L274-4(lines 274 291) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: false [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L414-1(lines 410 434) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 18:14:35,850 INFO L854 garLoopResultBuilder]: At program point L548-1(lines 533 551) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2))) [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,850 INFO L858 garLoopResultBuilder]: For program point L444-6(lines 444 452) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L145-5(lines 136 149) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L414-11(lines 410 434) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L493-2(lines 488 496) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L274-5(lines 266 294) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point L418-3(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 469 476) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point L414-8(lines 414 431) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point L542-15(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,851 INFO L854 garLoopResultBuilder]: At program point L440-5(lines 436 460) the Hoare annotation is: false [2022-01-10 18:14:35,851 INFO L858 garLoopResultBuilder]: For program point L278-4(lines 278 288) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L399-2(lines 378 401) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L466-1(lines 461 468) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L406-2(lines 402 408) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L406-9(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L542-17(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L279-6(lines 279 285) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L145-4(lines 136 149) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L414-9(lines 410 434) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L854 garLoopResultBuilder]: At program point L548-5(lines 533 551) the Hoare annotation is: false [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L300-2(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,852 INFO L858 garLoopResultBuilder]: For program point L542-12(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,853 INFO L858 garLoopResultBuilder]: For program point L418-15(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,853 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L301-2(lines 296 303) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L406(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L858 garLoopResultBuilder]: For program point L542-14(lines 542 546) no Hoare annotation was computed. [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L466-5(lines 461 468) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L406-10(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L548-4(lines 533 551) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L858 garLoopResultBuilder]: For program point L418-12(lines 418 426) no Hoare annotation was computed. [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L466-4(lines 461 468) the Hoare annotation is: false [2022-01-10 18:14:35,853 INFO L854 garLoopResultBuilder]: At program point L406-8(lines 402 408) the Hoare annotation is: false [2022-01-10 18:14:35,859 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,860 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:14:35,941 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:35 BasicIcfg [2022-01-10 18:14:35,941 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:14:35,941 INFO L158 Benchmark]: Toolchain (without parser) took 10271.75ms. Allocated memory was 188.7MB in the beginning and 346.0MB in the end (delta: 157.3MB). Free memory was 136.8MB in the beginning and 140.1MB in the end (delta: -3.3MB). Peak memory consumption was 176.2MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 188.7MB. Free memory is still 154.6MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: CACSL2BoogieTranslator took 543.36ms. Allocated memory is still 188.7MB. Free memory was 136.6MB in the beginning and 150.9MB in the end (delta: -14.3MB). Peak memory consumption was 5.9MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.51ms. Allocated memory is still 188.7MB. Free memory was 150.9MB in the beginning and 147.2MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: Boogie Preprocessor took 44.86ms. Allocated memory is still 188.7MB. Free memory was 147.2MB in the beginning and 145.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: RCFGBuilder took 1184.43ms. Allocated memory is still 188.7MB. Free memory was 144.6MB in the beginning and 121.5MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,942 INFO L158 Benchmark]: IcfgTransformer took 290.63ms. Allocated memory is still 188.7MB. Free memory was 121.5MB in the beginning and 112.1MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,943 INFO L158 Benchmark]: TraceAbstraction took 8133.86ms. Allocated memory was 188.7MB in the beginning and 346.0MB in the end (delta: 157.3MB). Free memory was 111.6MB in the beginning and 140.1MB in the end (delta: -28.5MB). Peak memory consumption was 152.4MB. Max. memory is 8.0GB. [2022-01-10 18:14:35,951 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 188.7MB. Free memory is still 154.6MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 543.36ms. Allocated memory is still 188.7MB. Free memory was 136.6MB in the beginning and 150.9MB in the end (delta: -14.3MB). Peak memory consumption was 5.9MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 67.51ms. Allocated memory is still 188.7MB. Free memory was 150.9MB in the beginning and 147.2MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 44.86ms. Allocated memory is still 188.7MB. Free memory was 147.2MB in the beginning and 145.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 1184.43ms. Allocated memory is still 188.7MB. Free memory was 144.6MB in the beginning and 121.5MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. * IcfgTransformer took 290.63ms. Allocated memory is still 188.7MB. Free memory was 121.5MB in the beginning and 112.1MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 8133.86ms. Allocated memory was 188.7MB in the beginning and 346.0MB in the end (delta: 157.3MB). Free memory was 111.6MB in the beginning and 140.1MB in the end (delta: -28.5MB). Peak memory consumption was 152.4MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 167 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 7.9s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1811 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1811 mSDsluCounter, 4360 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2503 mSDsCounter, 86 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 266 IncrementalHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 86 mSolverCounterUnsat, 1857 mSDtfsCounter, 266 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=516occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1634 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 82 LocationsWithAnnotation, 82 PreInvPairs, 165 NumberOfFragments, 1785 HoareAnnotationTreeSize, 82 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 82 FomulaSimplificationsInter, 232314 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 584 NumberOfCodeBlocks, 584 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 572 ConstructedInterpolants, 0 QuantifiedInterpolants, 1129 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 149/149 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) RESULT: Ultimate proved your program to be correct! [2022-01-10 18:14:36,035 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...