/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:04:07,368 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:04:07,369 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:04:07,433 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:04:07,433 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:04:07,434 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:04:07,434 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:04:07,435 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:04:07,437 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:04:07,440 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:04:07,440 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:04:07,442 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:04:07,442 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:04:07,443 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:04:07,444 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:04:07,446 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:04:07,447 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:04:07,448 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:04:07,449 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:04:07,453 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:04:07,454 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:04:07,455 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:04:07,457 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:04:07,458 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:04:07,462 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:04:07,462 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:04:07,463 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:04:07,464 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:04:07,464 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:04:07,464 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:04:07,464 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:04:07,465 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:04:07,466 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:04:07,466 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:04:07,467 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:04:07,467 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:04:07,468 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:04:07,468 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:04:07,468 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:04:07,469 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:04:07,469 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:04:07,470 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:04:07,493 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:04:07,494 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:04:07,494 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:04:07,494 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:04:07,495 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:04:07,495 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:04:07,495 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:04:07,495 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:04:07,495 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:04:07,495 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:04:07,496 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:04:07,497 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:04:07,497 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:04:07,497 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:04:07,497 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:07,498 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:04:07,498 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:04:07,499 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:04:07,499 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:04:07,499 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:04:07,700 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:04:07,723 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:04:07,725 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:04:07,726 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:04:07,727 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:04:07,728 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-11 00:04:07,783 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e04cff5a0/de7a98636ca94b3688d5b31ab1b10f50/FLAG689253d38 [2022-01-11 00:04:08,190 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:04:08,191 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-11 00:04:08,197 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e04cff5a0/de7a98636ca94b3688d5b31ab1b10f50/FLAG689253d38 [2022-01-11 00:04:08,206 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e04cff5a0/de7a98636ca94b3688d5b31ab1b10f50 [2022-01-11 00:04:08,208 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:04:08,208 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:04:08,210 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:08,211 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:04:08,213 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:04:08,213 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,214 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@629a06a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08, skipping insertion in model container [2022-01-11 00:04:08,214 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,218 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:04:08,245 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:08,466 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 00:04:08,551 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:08,562 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:04:08,572 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:08,596 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 00:04:08,635 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:08,642 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:04:08,669 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 00:04:08,692 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:08,707 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:04:08,707 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08 WrapperNode [2022-01-11 00:04:08,708 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:08,708 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:08,709 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:04:08,709 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:04:08,713 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,738 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,778 INFO L137 Inliner]: procedures = 57, calls = 156, calls flagged for inlining = 53, calls inlined = 80, statements flattened = 604 [2022-01-11 00:04:08,780 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:08,781 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:04:08,781 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:04:08,782 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:04:08,787 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,788 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,796 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,797 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,809 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,813 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,815 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:04:08,831 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:04:08,831 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:04:08,831 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:04:08,831 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (1/1) ... [2022-01-11 00:04:08,853 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:08,863 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:04:08,875 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:04:08,895 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:04:08,910 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:04:08,911 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:04:08,911 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:04:08,911 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:04:08,978 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:04:08,979 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:04:09,344 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:04:09,349 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:04:09,350 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:04:09,351 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:09 BoogieIcfgContainer [2022-01-11 00:04:09,351 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:04:09,352 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:04:09,352 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:04:09,353 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:04:09,355 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,466 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:09 BasicIcfg [2022-01-11 00:04:09,466 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:04:09,467 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:04:09,468 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:04:09,469 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:04:09,470 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:04:08" (1/4) ... [2022-01-11 00:04:09,470 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bcc99e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:09, skipping insertion in model container [2022-01-11 00:04:09,470 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:08" (2/4) ... [2022-01-11 00:04:09,470 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bcc99e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:09, skipping insertion in model container [2022-01-11 00:04:09,471 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:09" (3/4) ... [2022-01-11 00:04:09,471 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bcc99e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:04:09, skipping insertion in model container [2022-01-11 00:04:09,480 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:09" (4/4) ... [2022-01-11 00:04:09,481 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.cTransformedIcfg [2022-01-11 00:04:09,485 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:04:09,485 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:04:09,516 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:04:09,520 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:04:09,521 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:04:09,532 INFO L276 IsEmpty]: Start isEmpty. Operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 00:04:09,537 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:09,537 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:09,538 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:09,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:09,542 INFO L85 PathProgramCache]: Analyzing trace with hash -429092198, now seen corresponding path program 1 times [2022-01-11 00:04:09,547 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:09,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1652250117] [2022-01-11 00:04:09,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:09,548 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:09,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:09,733 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:09,734 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:09,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1652250117] [2022-01-11 00:04:09,735 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1652250117] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:09,735 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:09,735 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:09,736 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670755701] [2022-01-11 00:04:09,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:09,739 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:04:09,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:09,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:04:09,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:09,758 INFO L87 Difference]: Start difference. First operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:09,785 INFO L93 Difference]: Finished difference Result 323 states and 444 transitions. [2022-01-11 00:04:09,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:04:09,786 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 00:04:09,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:09,792 INFO L225 Difference]: With dead ends: 323 [2022-01-11 00:04:09,792 INFO L226 Difference]: Without dead ends: 157 [2022-01-11 00:04:09,795 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:09,797 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:09,798 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:09,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-01-11 00:04:09,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-01-11 00:04:09,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.3636363636363635) internal successors, (210), 156 states have internal predecessors, (210), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 210 transitions. [2022-01-11 00:04:09,847 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 210 transitions. Word has length 19 [2022-01-11 00:04:09,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:09,848 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 210 transitions. [2022-01-11 00:04:09,848 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,848 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 210 transitions. [2022-01-11 00:04:09,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 00:04:09,848 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:09,849 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:09,849 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:04:09,849 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:09,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:09,850 INFO L85 PathProgramCache]: Analyzing trace with hash 2048464979, now seen corresponding path program 1 times [2022-01-11 00:04:09,850 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:09,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [570747479] [2022-01-11 00:04:09,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:09,850 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:09,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:09,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:09,904 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:09,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [570747479] [2022-01-11 00:04:09,904 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [570747479] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:09,904 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:09,905 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:09,905 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221190082] [2022-01-11 00:04:09,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:09,907 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:09,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:09,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:09,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:09,911 INFO L87 Difference]: Start difference. First operand 157 states and 210 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:09,963 INFO L93 Difference]: Finished difference Result 370 states and 499 transitions. [2022-01-11 00:04:09,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:09,964 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 00:04:09,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:09,965 INFO L225 Difference]: With dead ends: 370 [2022-01-11 00:04:09,965 INFO L226 Difference]: Without dead ends: 221 [2022-01-11 00:04:09,966 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:09,967 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 193 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:09,968 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:09,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-01-11 00:04:09,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 212. [2022-01-11 00:04:09,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 209 states have (on average 1.3732057416267942) internal successors, (287), 211 states have internal predecessors, (287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 287 transitions. [2022-01-11 00:04:09,980 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 287 transitions. Word has length 20 [2022-01-11 00:04:09,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:09,980 INFO L470 AbstractCegarLoop]: Abstraction has 212 states and 287 transitions. [2022-01-11 00:04:09,980 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:09,981 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 287 transitions. [2022-01-11 00:04:09,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-11 00:04:09,981 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:09,981 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:09,982 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:04:09,982 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:09,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:09,982 INFO L85 PathProgramCache]: Analyzing trace with hash 1951981762, now seen corresponding path program 1 times [2022-01-11 00:04:09,982 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:09,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [702838239] [2022-01-11 00:04:09,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:09,983 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:10,051 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [702838239] [2022-01-11 00:04:10,051 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [702838239] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,051 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,051 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:10,051 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1878733453] [2022-01-11 00:04:10,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,052 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:10,052 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:10,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,053 INFO L87 Difference]: Start difference. First operand 212 states and 287 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,143 INFO L93 Difference]: Finished difference Result 475 states and 642 transitions. [2022-01-11 00:04:10,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:10,144 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-11 00:04:10,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,146 INFO L225 Difference]: With dead ends: 475 [2022-01-11 00:04:10,146 INFO L226 Difference]: Without dead ends: 271 [2022-01-11 00:04:10,151 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,155 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 141 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,155 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 295 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:10,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-01-11 00:04:10,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 265. [2022-01-11 00:04:10,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 264 states have internal predecessors, (347), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 347 transitions. [2022-01-11 00:04:10,185 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 347 transitions. Word has length 25 [2022-01-11 00:04:10,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:10,185 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 347 transitions. [2022-01-11 00:04:10,185 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,186 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 347 transitions. [2022-01-11 00:04:10,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-11 00:04:10,189 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,189 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,189 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:04:10,189 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,190 INFO L85 PathProgramCache]: Analyzing trace with hash -582203850, now seen corresponding path program 1 times [2022-01-11 00:04:10,190 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1370132392] [2022-01-11 00:04:10,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,191 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:10,280 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1370132392] [2022-01-11 00:04:10,280 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1370132392] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:10,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1804392874] [2022-01-11 00:04:10,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,282 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:10,282 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:10,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,283 INFO L87 Difference]: Start difference. First operand 265 states and 347 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,326 INFO L93 Difference]: Finished difference Result 522 states and 686 transitions. [2022-01-11 00:04:10,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:10,327 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-11 00:04:10,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,329 INFO L225 Difference]: With dead ends: 522 [2022-01-11 00:04:10,329 INFO L226 Difference]: Without dead ends: 516 [2022-01-11 00:04:10,330 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,335 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 166 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,336 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 385 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:10,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2022-01-11 00:04:10,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 516. [2022-01-11 00:04:10,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 513 states have (on average 1.3138401559454191) internal successors, (674), 515 states have internal predecessors, (674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 674 transitions. [2022-01-11 00:04:10,371 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 674 transitions. Word has length 30 [2022-01-11 00:04:10,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:10,371 INFO L470 AbstractCegarLoop]: Abstraction has 516 states and 674 transitions. [2022-01-11 00:04:10,371 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,371 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 674 transitions. [2022-01-11 00:04:10,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-11 00:04:10,374 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,375 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:04:10,376 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,376 INFO L85 PathProgramCache]: Analyzing trace with hash 714549505, now seen corresponding path program 1 times [2022-01-11 00:04:10,377 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109697292] [2022-01-11 00:04:10,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,377 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,440 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:10,440 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109697292] [2022-01-11 00:04:10,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109697292] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,440 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:10,441 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546641968] [2022-01-11 00:04:10,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:10,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:10,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,442 INFO L87 Difference]: Start difference. First operand 516 states and 674 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,461 INFO L93 Difference]: Finished difference Result 516 states and 674 transitions. [2022-01-11 00:04:10,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:10,462 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-11 00:04:10,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,463 INFO L225 Difference]: With dead ends: 516 [2022-01-11 00:04:10,463 INFO L226 Difference]: Without dead ends: 230 [2022-01-11 00:04:10,463 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:10,464 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 57 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,464 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:10,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2022-01-11 00:04:10,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2022-01-11 00:04:10,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 229 states have (on average 1.3362445414847162) internal successors, (306), 229 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 306 transitions. [2022-01-11 00:04:10,479 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 306 transitions. Word has length 43 [2022-01-11 00:04:10,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:10,479 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 306 transitions. [2022-01-11 00:04:10,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,479 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 306 transitions. [2022-01-11 00:04:10,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-01-11 00:04:10,480 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,480 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,480 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:04:10,481 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,481 INFO L85 PathProgramCache]: Analyzing trace with hash 683143848, now seen corresponding path program 1 times [2022-01-11 00:04:10,481 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747222859] [2022-01-11 00:04:10,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,481 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,531 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-11 00:04:10,532 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747222859] [2022-01-11 00:04:10,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747222859] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,532 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:10,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601588866] [2022-01-11 00:04:10,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:10,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:10,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:10,533 INFO L87 Difference]: Start difference. First operand 230 states and 306 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,623 INFO L93 Difference]: Finished difference Result 884 states and 1174 transitions. [2022-01-11 00:04:10,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 00:04:10,624 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-01-11 00:04:10,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,626 INFO L225 Difference]: With dead ends: 884 [2022-01-11 00:04:10,626 INFO L226 Difference]: Without dead ends: 662 [2022-01-11 00:04:10,626 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:04:10,627 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 352 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,627 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [352 Valid, 525 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:10,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2022-01-11 00:04:10,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 331. [2022-01-11 00:04:10,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 330 states have (on average 1.3181818181818181) internal successors, (435), 330 states have internal predecessors, (435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 435 transitions. [2022-01-11 00:04:10,649 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 435 transitions. Word has length 49 [2022-01-11 00:04:10,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:10,650 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 435 transitions. [2022-01-11 00:04:10,650 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,650 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 435 transitions. [2022-01-11 00:04:10,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-11 00:04:10,650 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,651 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,651 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:04:10,651 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,651 INFO L85 PathProgramCache]: Analyzing trace with hash -181742847, now seen corresponding path program 1 times [2022-01-11 00:04:10,652 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,652 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286330473] [2022-01-11 00:04:10,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,652 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,727 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-11 00:04:10,727 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286330473] [2022-01-11 00:04:10,727 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286330473] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:10,728 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [611684004] [2022-01-11 00:04:10,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,728 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:10,728 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:10,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:10,729 INFO L87 Difference]: Start difference. First operand 331 states and 435 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,809 INFO L93 Difference]: Finished difference Result 811 states and 1061 transitions. [2022-01-11 00:04:10,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:10,810 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-01-11 00:04:10,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,811 INFO L225 Difference]: With dead ends: 811 [2022-01-11 00:04:10,812 INFO L226 Difference]: Without dead ends: 488 [2022-01-11 00:04:10,812 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:10,813 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 168 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,813 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 357 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:10,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-01-11 00:04:10,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 278. [2022-01-11 00:04:10,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 277 states have (on average 1.3068592057761732) internal successors, (362), 277 states have internal predecessors, (362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 362 transitions. [2022-01-11 00:04:10,859 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 362 transitions. Word has length 51 [2022-01-11 00:04:10,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:10,859 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 362 transitions. [2022-01-11 00:04:10,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,859 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 362 transitions. [2022-01-11 00:04:10,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 00:04:10,860 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,861 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:04:10,861 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,861 INFO L85 PathProgramCache]: Analyzing trace with hash 637933471, now seen corresponding path program 1 times [2022-01-11 00:04:10,861 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175675139] [2022-01-11 00:04:10,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,861 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,932 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:10,932 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175675139] [2022-01-11 00:04:10,932 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1175675139] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,932 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,932 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:04:10,932 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1158230258] [2022-01-11 00:04:10,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,933 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:10,933 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:10,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:10,934 INFO L87 Difference]: Start difference. First operand 278 states and 362 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,002 INFO L93 Difference]: Finished difference Result 772 states and 998 transitions. [2022-01-11 00:04:11,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:04:11,003 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 00:04:11,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,004 INFO L225 Difference]: With dead ends: 772 [2022-01-11 00:04:11,004 INFO L226 Difference]: Without dead ends: 502 [2022-01-11 00:04:11,005 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:04:11,006 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 170 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,007 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [170 Valid, 434 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-01-11 00:04:11,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 290. [2022-01-11 00:04:11,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 289 states have (on average 1.2941176470588236) internal successors, (374), 289 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 374 transitions. [2022-01-11 00:04:11,036 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 374 transitions. Word has length 68 [2022-01-11 00:04:11,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,037 INFO L470 AbstractCegarLoop]: Abstraction has 290 states and 374 transitions. [2022-01-11 00:04:11,037 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,037 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 374 transitions. [2022-01-11 00:04:11,038 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 00:04:11,038 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,038 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,038 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:04:11,038 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,039 INFO L85 PathProgramCache]: Analyzing trace with hash 189236832, now seen corresponding path program 1 times [2022-01-11 00:04:11,039 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,039 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988623529] [2022-01-11 00:04:11,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,039 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,086 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:11,087 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988623529] [2022-01-11 00:04:11,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988623529] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,087 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:11,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2123913905] [2022-01-11 00:04:11,087 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:04:11,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,090 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:04:11,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:04:11,090 INFO L87 Difference]: Start difference. First operand 290 states and 374 transitions. Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,163 INFO L93 Difference]: Finished difference Result 812 states and 1038 transitions. [2022-01-11 00:04:11,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:11,164 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 00:04:11,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,165 INFO L225 Difference]: With dead ends: 812 [2022-01-11 00:04:11,166 INFO L226 Difference]: Without dead ends: 530 [2022-01-11 00:04:11,166 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:11,168 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 144 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,168 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 317 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-01-11 00:04:11,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 298. [2022-01-11 00:04:11,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 297 states have (on average 1.2861952861952861) internal successors, (382), 297 states have internal predecessors, (382), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 382 transitions. [2022-01-11 00:04:11,193 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 382 transitions. Word has length 68 [2022-01-11 00:04:11,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,193 INFO L470 AbstractCegarLoop]: Abstraction has 298 states and 382 transitions. [2022-01-11 00:04:11,193 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,193 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 382 transitions. [2022-01-11 00:04:11,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 00:04:11,194 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,194 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,194 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:04:11,194 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,195 INFO L85 PathProgramCache]: Analyzing trace with hash -1511503647, now seen corresponding path program 1 times [2022-01-11 00:04:11,195 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247379892] [2022-01-11 00:04:11,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,195 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,260 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-11 00:04:11,260 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247379892] [2022-01-11 00:04:11,260 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247379892] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,260 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,260 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:04:11,260 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1734524643] [2022-01-11 00:04:11,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,261 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:04:11,261 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:04:11,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:11,261 INFO L87 Difference]: Start difference. First operand 298 states and 382 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,451 INFO L93 Difference]: Finished difference Result 1184 states and 1525 transitions. [2022-01-11 00:04:11,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 00:04:11,452 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 00:04:11,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,455 INFO L225 Difference]: With dead ends: 1184 [2022-01-11 00:04:11,455 INFO L226 Difference]: Without dead ends: 894 [2022-01-11 00:04:11,456 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-11 00:04:11,456 INFO L933 BasicCegarLoop]: 251 mSDtfsCounter, 364 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 364 SdHoareTripleChecker+Valid, 1118 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,457 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [364 Valid, 1118 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:11,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2022-01-11 00:04:11,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 266. [2022-01-11 00:04:11,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 265 states have (on average 1.2679245283018867) internal successors, (336), 265 states have internal predecessors, (336), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 336 transitions. [2022-01-11 00:04:11,482 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 336 transitions. Word has length 68 [2022-01-11 00:04:11,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,483 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 336 transitions. [2022-01-11 00:04:11,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,484 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 336 transitions. [2022-01-11 00:04:11,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-11 00:04:11,484 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,484 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 00:04:11,485 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,485 INFO L85 PathProgramCache]: Analyzing trace with hash -1381747203, now seen corresponding path program 1 times [2022-01-11 00:04:11,485 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1773890915] [2022-01-11 00:04:11,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,485 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,520 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:11,520 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1773890915] [2022-01-11 00:04:11,520 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1773890915] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,520 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,520 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:11,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951043248] [2022-01-11 00:04:11,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,521 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,521 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,521 INFO L87 Difference]: Start difference. First operand 266 states and 336 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,555 INFO L93 Difference]: Finished difference Result 509 states and 646 transitions. [2022-01-11 00:04:11,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,555 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-11 00:04:11,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,557 INFO L225 Difference]: With dead ends: 509 [2022-01-11 00:04:11,557 INFO L226 Difference]: Without dead ends: 251 [2022-01-11 00:04:11,558 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,558 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 27 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,558 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 153 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-01-11 00:04:11,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 245. [2022-01-11 00:04:11,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 244 states have (on average 1.2336065573770492) internal successors, (301), 244 states have internal predecessors, (301), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 301 transitions. [2022-01-11 00:04:11,578 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 301 transitions. Word has length 69 [2022-01-11 00:04:11,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,578 INFO L470 AbstractCegarLoop]: Abstraction has 245 states and 301 transitions. [2022-01-11 00:04:11,578 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,578 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 301 transitions. [2022-01-11 00:04:11,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-11 00:04:11,579 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,579 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,579 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 00:04:11,579 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,579 INFO L85 PathProgramCache]: Analyzing trace with hash -1490070595, now seen corresponding path program 1 times [2022-01-11 00:04:11,579 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286200900] [2022-01-11 00:04:11,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,580 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,607 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-11 00:04:11,607 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286200900] [2022-01-11 00:04:11,608 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286200900] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,608 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,608 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:11,608 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556377483] [2022-01-11 00:04:11,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,608 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,608 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,609 INFO L87 Difference]: Start difference. First operand 245 states and 301 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,631 INFO L93 Difference]: Finished difference Result 467 states and 574 transitions. [2022-01-11 00:04:11,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,632 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-11 00:04:11,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,632 INFO L225 Difference]: With dead ends: 467 [2022-01-11 00:04:11,632 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:04:11,632 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,633 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 29 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,633 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 164 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:04:11,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:04:11,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:04:11,634 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 74 [2022-01-11 00:04:11,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,634 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:04:11,634 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,634 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:04:11,634 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:04:11,636 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:04:11,636 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:04:11,636 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:04:11,636 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-11 00:04:11,638 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:04:16,871 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:04:16,871 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:04:16,871 INFO L854 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:16,871 INFO L854 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:16,872 INFO L854 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:16,872 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-01-11 00:04:16,872 INFO L854 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:16,872 INFO L858 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-01-11 00:04:16,872 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:16,872 INFO L861 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-01-11 00:04:16,872 INFO L854 garLoopResultBuilder]: At program point L316-2(lines 316 363) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 00:04:16,872 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:04:16,872 INFO L854 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-01-11 00:04:16,873 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L382-3(lines 382 388) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L382-5(lines 381 400) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L440-2(lines 440 457) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 395) no Hoare annotation was computed. [2022-01-11 00:04:16,876 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-11 00:04:16,877 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 332) no Hoare annotation was computed. [2022-01-11 00:04:16,877 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-11 00:04:16,877 INFO L858 garLoopResultBuilder]: For program point L414-6(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,891 INFO L854 garLoopResultBuilder]: At program point L100-3(lines 95 103) the Hoare annotation is: false [2022-01-11 00:04:16,891 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 00:04:16,891 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-01-11 00:04:16,891 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 477 487) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L140-3(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L406-7(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L274-2(lines 274 291) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 342) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L444-3(lines 444 452) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L145-3(lines 136 149) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L414-7(lines 410 434) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L493-1(lines 488 496) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L274-3(lines 266 294) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 469 476) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L414-4(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L542-9(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L440-3(lines 436 460) the Hoare annotation is: false [2022-01-11 00:04:16,892 INFO L858 garLoopResultBuilder]: For program point L278-2(lines 278 288) no Hoare annotation was computed. [2022-01-11 00:04:16,892 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 378 401) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 346 359) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L406-5(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L542-11(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L279-3(lines 279 285) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L382(lines 382 388) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L414-5(lines 410 434) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L548-3(lines 533 551) the Hoare annotation is: false [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L300-1(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L861 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L858 garLoopResultBuilder]: For program point L382-2(lines 381 400) no Hoare annotation was computed. [2022-01-11 00:04:16,893 INFO L854 garLoopResultBuilder]: At program point L474(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 00:04:16,894 INFO L858 garLoopResultBuilder]: For program point L556-2(lines 556 562) no Hoare annotation was computed. [2022-01-11 00:04:16,894 INFO L858 garLoopResultBuilder]: For program point L542-6(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point L418-9(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L854 garLoopResultBuilder]: At program point L301-1(lines 296 303) the Hoare annotation is: false [2022-01-11 00:04:16,895 INFO L861 garLoopResultBuilder]: At program point L369(lines 306 371) the Hoare annotation is: true [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-01-11 00:04:16,895 INFO L854 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:04:16,895 INFO L858 garLoopResultBuilder]: For program point L542-8(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L466-3(lines 461 468) the Hoare annotation is: false [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L406-6(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,896 INFO L861 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L167-1(lines 167 171) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L414-2(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L548-2(lines 533 551) the Hoare annotation is: false [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L382-6(lines 382 388) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L406-3(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L418-6(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L382-8(lines 381 400) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L858 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-11 00:04:16,896 INFO L854 garLoopResultBuilder]: At program point L414-3(lines 410 434) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:16,897 INFO L854 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 00:04:16,897 INFO L854 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 00:04:16,897 INFO L854 garLoopResultBuilder]: At program point L466-2(lines 461 468) the Hoare annotation is: false [2022-01-11 00:04:16,897 INFO L854 garLoopResultBuilder]: At program point L406-4(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,897 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-11 00:04:16,897 INFO L858 garLoopResultBuilder]: For program point L440-4(lines 440 457) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 395) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 469 476) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~4#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L542-3(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L440-1(lines 436 460) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L399(lines 378 401) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L100-4(lines 95 103) the Hoare annotation is: false [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L414-10(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L100-5(lines 95 103) the Hoare annotation is: false [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L406-1(lines 402 408) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L542-5(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 477 487) the Hoare annotation is: false [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L140-5(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L406-11(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,898 INFO L858 garLoopResultBuilder]: For program point L274-4(lines 274 291) no Hoare annotation was computed. [2022-01-11 00:04:16,898 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: false [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L414-1(lines 410 434) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L548-1(lines 533 551) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2))) [2022-01-11 00:04:16,899 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,899 INFO L858 garLoopResultBuilder]: For program point L444-6(lines 444 452) no Hoare annotation was computed. [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L145-5(lines 136 149) the Hoare annotation is: false [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L414-11(lines 410 434) the Hoare annotation is: false [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L493-2(lines 488 496) the Hoare annotation is: false [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L274-5(lines 266 294) the Hoare annotation is: false [2022-01-11 00:04:16,899 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,899 INFO L858 garLoopResultBuilder]: For program point L418-3(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,899 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,899 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 469 476) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L414-8(lines 414 431) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L542-15(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L440-5(lines 436 460) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L278-4(lines 278 288) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L399-2(lines 378 401) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L466-1(lines 461 468) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L406-2(lines 402 408) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 146) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L406-9(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L542-17(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L279-6(lines 279 285) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L145-4(lines 136 149) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L414-9(lines 410 434) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L854 garLoopResultBuilder]: At program point L548-5(lines 533 551) the Hoare annotation is: false [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L300-2(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,900 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L858 garLoopResultBuilder]: For program point L542-12(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L858 garLoopResultBuilder]: For program point L418-15(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L301-2(lines 296 303) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L406(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L858 garLoopResultBuilder]: For program point L542-14(lines 542 546) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L466-5(lines 461 468) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L406-10(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L548-4(lines 533 551) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L858 garLoopResultBuilder]: For program point L418-12(lines 418 426) no Hoare annotation was computed. [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L466-4(lines 461 468) the Hoare annotation is: false [2022-01-11 00:04:16,902 INFO L854 garLoopResultBuilder]: At program point L406-8(lines 402 408) the Hoare annotation is: false [2022-01-11 00:04:16,905 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:16,905 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:04:16,984 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:04:16 BasicIcfg [2022-01-11 00:04:16,984 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:04:16,984 INFO L158 Benchmark]: Toolchain (without parser) took 8775.92ms. Allocated memory was 201.3MB in the beginning and 386.9MB in the end (delta: 185.6MB). Free memory was 150.1MB in the beginning and 352.8MB in the end (delta: -202.7MB). Peak memory consumption was 202.0MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,984 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 201.3MB. Free memory is still 167.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:04:16,985 INFO L158 Benchmark]: CACSL2BoogieTranslator took 497.37ms. Allocated memory is still 201.3MB. Free memory was 149.9MB in the beginning and 162.3MB in the end (delta: -12.4MB). Peak memory consumption was 12.3MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,985 INFO L158 Benchmark]: Boogie Procedure Inliner took 72.16ms. Allocated memory is still 201.3MB. Free memory was 162.3MB in the beginning and 158.7MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,986 INFO L158 Benchmark]: Boogie Preprocessor took 48.75ms. Allocated memory is still 201.3MB. Free memory was 158.7MB in the beginning and 156.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,987 INFO L158 Benchmark]: RCFGBuilder took 520.80ms. Allocated memory is still 201.3MB. Free memory was 156.0MB in the beginning and 131.9MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,987 INFO L158 Benchmark]: IcfgTransformer took 114.55ms. Allocated memory is still 201.3MB. Free memory was 131.9MB in the beginning and 122.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,987 INFO L158 Benchmark]: TraceAbstraction took 7516.52ms. Allocated memory was 201.3MB in the beginning and 386.9MB in the end (delta: 185.6MB). Free memory was 122.0MB in the beginning and 352.8MB in the end (delta: -230.8MB). Peak memory consumption was 172.9MB. Max. memory is 8.0GB. [2022-01-11 00:04:16,988 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 201.3MB. Free memory is still 167.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 497.37ms. Allocated memory is still 201.3MB. Free memory was 149.9MB in the beginning and 162.3MB in the end (delta: -12.4MB). Peak memory consumption was 12.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 72.16ms. Allocated memory is still 201.3MB. Free memory was 162.3MB in the beginning and 158.7MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 48.75ms. Allocated memory is still 201.3MB. Free memory was 158.7MB in the beginning and 156.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 520.80ms. Allocated memory is still 201.3MB. Free memory was 156.0MB in the beginning and 131.9MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 114.55ms. Allocated memory is still 201.3MB. Free memory was 131.9MB in the beginning and 122.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 7516.52ms. Allocated memory was 201.3MB in the beginning and 386.9MB in the end (delta: 185.6MB). Free memory was 122.0MB in the beginning and 352.8MB in the end (delta: -230.8MB). Peak memory consumption was 172.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 167 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 7.4s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1811 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1811 mSDsluCounter, 4360 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2503 mSDsCounter, 86 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 266 IncrementalHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 86 mSolverCounterUnsat, 1857 mSDtfsCounter, 266 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=516occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1634 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 82 LocationsWithAnnotation, 82 PreInvPairs, 165 NumberOfFragments, 1785 HoareAnnotationTreeSize, 82 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 82 FomulaSimplificationsInter, 232314 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 584 NumberOfCodeBlocks, 584 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 572 ConstructedInterpolants, 0 QuantifiedInterpolants, 1129 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 149/149 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) RESULT: Ultimate proved your program to be correct! [2022-01-11 00:04:17,043 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...