/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:04:08,587 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:04:08,589 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:04:08,609 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:04:08,610 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:04:08,610 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:04:08,614 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:04:08,616 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:04:08,617 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:04:08,653 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:04:08,653 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:04:08,655 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:04:08,656 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:04:08,658 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:04:08,659 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:04:08,660 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:04:08,661 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:04:08,661 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:04:08,666 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:04:08,667 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:04:08,668 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:04:08,668 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:04:08,669 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:04:08,669 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:04:08,671 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:04:08,671 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:04:08,671 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:04:08,672 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:04:08,672 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:04:08,672 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:04:08,673 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:04:08,673 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:04:08,673 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:04:08,674 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:04:08,674 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:04:08,674 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:04:08,675 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:04:08,675 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:04:08,675 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:04:08,675 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:04:08,676 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:04:08,677 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:04:08,694 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:04:08,694 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:04:08,694 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:04:08,694 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:04:08,695 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:04:08,695 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:04:08,695 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:04:08,696 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:04:08,696 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:04:08,697 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:08,697 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:04:08,697 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:04:08,698 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:04:08,698 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:04:08,698 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:04:08,698 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:04:08,699 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:04:08,881 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:04:08,898 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:04:08,902 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:04:08,903 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:04:08,906 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:04:08,907 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c [2022-01-11 00:04:08,960 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20475b459/bc74cc42b8c24235b39ef532e6f95d67/FLAGa111ebfd7 [2022-01-11 00:04:09,393 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:04:09,393 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c [2022-01-11 00:04:09,407 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20475b459/bc74cc42b8c24235b39ef532e6f95d67/FLAGa111ebfd7 [2022-01-11 00:04:09,417 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/20475b459/bc74cc42b8c24235b39ef532e6f95d67 [2022-01-11 00:04:09,422 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:04:09,424 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:04:09,426 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:09,426 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:04:09,428 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:04:09,429 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,429 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47d5564f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09, skipping insertion in model container [2022-01-11 00:04:09,430 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,434 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:04:09,471 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:09,678 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-11 00:04:09,684 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:09,693 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:04:09,704 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:09,766 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-11 00:04:09,769 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:09,775 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:04:09,825 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-01-11 00:04:09,828 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:09,841 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:04:09,841 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09 WrapperNode [2022-01-11 00:04:09,841 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:09,842 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:09,842 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:04:09,842 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:04:09,847 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,858 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,883 INFO L137 Inliner]: procedures = 58, calls = 157, calls flagged for inlining = 54, calls inlined = 81, statements flattened = 607 [2022-01-11 00:04:09,883 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:09,884 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:04:09,884 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:04:09,884 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:04:09,890 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,890 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,893 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,893 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,900 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,905 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,906 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,909 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:04:09,910 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:04:09,910 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:04:09,910 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:04:09,911 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (1/1) ... [2022-01-11 00:04:09,933 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:09,942 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:04:09,952 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:04:09,954 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:04:09,989 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:04:09,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:04:09,990 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:04:09,990 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:04:10,097 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:04:10,098 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:04:10,440 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:04:10,446 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:04:10,446 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:04:10,448 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:10 BoogieIcfgContainer [2022-01-11 00:04:10,448 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:04:10,449 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:04:10,449 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:04:10,450 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:04:10,452 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:10" (1/1) ... [2022-01-11 00:04:10,577 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:10 BasicIcfg [2022-01-11 00:04:10,577 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:04:10,578 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:04:10,578 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:04:10,581 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:04:10,581 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:04:09" (1/4) ... [2022-01-11 00:04:10,581 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17ad10e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:10, skipping insertion in model container [2022-01-11 00:04:10,581 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:09" (2/4) ... [2022-01-11 00:04:10,582 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17ad10e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:10, skipping insertion in model container [2022-01-11 00:04:10,582 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:10" (3/4) ... [2022-01-11 00:04:10,582 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17ad10e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:04:10, skipping insertion in model container [2022-01-11 00:04:10,582 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:10" (4/4) ... [2022-01-11 00:04:10,583 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product40.cil.cTransformedIcfg [2022-01-11 00:04:10,586 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:04:10,587 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:04:10,640 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:04:10,645 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:04:10,645 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:04:10,661 INFO L276 IsEmpty]: Start isEmpty. Operand has 168 states, 164 states have (on average 1.396341463414634) internal successors, (229), 167 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 00:04:10,665 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:10,669 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:10,669 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:10,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:10,674 INFO L85 PathProgramCache]: Analyzing trace with hash 1261639771, now seen corresponding path program 1 times [2022-01-11 00:04:10,681 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:10,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1250690084] [2022-01-11 00:04:10,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:10,682 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:10,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:10,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:10,867 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:10,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1250690084] [2022-01-11 00:04:10,868 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1250690084] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:10,868 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:10,868 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:10,869 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [835744007] [2022-01-11 00:04:10,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:10,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:04:10,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:10,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:04:10,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:10,902 INFO L87 Difference]: Start difference. First operand has 168 states, 164 states have (on average 1.396341463414634) internal successors, (229), 167 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:10,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:10,952 INFO L93 Difference]: Finished difference Result 325 states and 446 transitions. [2022-01-11 00:04:10,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:04:10,954 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 00:04:10,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:10,963 INFO L225 Difference]: With dead ends: 325 [2022-01-11 00:04:10,963 INFO L226 Difference]: Without dead ends: 158 [2022-01-11 00:04:10,966 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:10,970 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:10,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:10,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-01-11 00:04:11,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 158. [2022-01-11 00:04:11,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 155 states have (on average 1.3612903225806452) internal successors, (211), 157 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 211 transitions. [2022-01-11 00:04:11,018 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 211 transitions. Word has length 19 [2022-01-11 00:04:11,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,018 INFO L470 AbstractCegarLoop]: Abstraction has 158 states and 211 transitions. [2022-01-11 00:04:11,018 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,019 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 211 transitions. [2022-01-11 00:04:11,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 00:04:11,020 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,020 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,021 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:04:11,021 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,023 INFO L85 PathProgramCache]: Analyzing trace with hash -1373418798, now seen corresponding path program 1 times [2022-01-11 00:04:11,023 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637554071] [2022-01-11 00:04:11,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,025 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:11,144 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637554071] [2022-01-11 00:04:11,144 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637554071] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,145 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,145 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:11,145 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881077774] [2022-01-11 00:04:11,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,147 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,147 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,151 INFO L87 Difference]: Start difference. First operand 158 states and 211 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,206 INFO L93 Difference]: Finished difference Result 372 states and 501 transitions. [2022-01-11 00:04:11,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,208 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 00:04:11,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,209 INFO L225 Difference]: With dead ends: 372 [2022-01-11 00:04:11,209 INFO L226 Difference]: Without dead ends: 222 [2022-01-11 00:04:11,210 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,211 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 193 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-01-11 00:04:11,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 213. [2022-01-11 00:04:11,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 210 states have (on average 1.3714285714285714) internal successors, (288), 212 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 288 transitions. [2022-01-11 00:04:11,226 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 288 transitions. Word has length 20 [2022-01-11 00:04:11,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,226 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 288 transitions. [2022-01-11 00:04:11,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,226 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 288 transitions. [2022-01-11 00:04:11,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-11 00:04:11,227 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,227 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,227 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:04:11,228 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,228 INFO L85 PathProgramCache]: Analyzing trace with hash 1667718595, now seen corresponding path program 1 times [2022-01-11 00:04:11,228 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1051443634] [2022-01-11 00:04:11,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,229 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:11,281 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1051443634] [2022-01-11 00:04:11,281 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1051443634] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,281 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,281 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:11,281 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606745715] [2022-01-11 00:04:11,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,282 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,282 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,283 INFO L87 Difference]: Start difference. First operand 213 states and 288 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,370 INFO L93 Difference]: Finished difference Result 478 states and 645 transitions. [2022-01-11 00:04:11,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,370 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-11 00:04:11,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,373 INFO L225 Difference]: With dead ends: 478 [2022-01-11 00:04:11,373 INFO L226 Difference]: Without dead ends: 273 [2022-01-11 00:04:11,378 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,381 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 141 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,383 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 316 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:11,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2022-01-11 00:04:11,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 267. [2022-01-11 00:04:11,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 264 states have (on average 1.321969696969697) internal successors, (349), 266 states have internal predecessors, (349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 349 transitions. [2022-01-11 00:04:11,403 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 349 transitions. Word has length 25 [2022-01-11 00:04:11,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,403 INFO L470 AbstractCegarLoop]: Abstraction has 267 states and 349 transitions. [2022-01-11 00:04:11,404 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,404 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 349 transitions. [2022-01-11 00:04:11,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-11 00:04:11,405 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,405 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,405 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:04:11,406 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,406 INFO L85 PathProgramCache]: Analyzing trace with hash -497802192, now seen corresponding path program 1 times [2022-01-11 00:04:11,406 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235620063] [2022-01-11 00:04:11,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,407 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:11,497 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235620063] [2022-01-11 00:04:11,498 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [235620063] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,498 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,498 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:11,498 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1386928942] [2022-01-11 00:04:11,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,499 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,500 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,501 INFO L87 Difference]: Start difference. First operand 267 states and 349 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,541 INFO L93 Difference]: Finished difference Result 526 states and 690 transitions. [2022-01-11 00:04:11,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,542 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-11 00:04:11,542 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,545 INFO L225 Difference]: With dead ends: 526 [2022-01-11 00:04:11,545 INFO L226 Difference]: Without dead ends: 520 [2022-01-11 00:04:11,545 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,551 INFO L933 BasicCegarLoop]: 202 mSDtfsCounter, 167 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,552 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [167 Valid, 387 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2022-01-11 00:04:11,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 520. [2022-01-11 00:04:11,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 520 states, 517 states have (on average 1.311411992263056) internal successors, (678), 519 states have internal predecessors, (678), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 520 states to 520 states and 678 transitions. [2022-01-11 00:04:11,581 INFO L78 Accepts]: Start accepts. Automaton has 520 states and 678 transitions. Word has length 30 [2022-01-11 00:04:11,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,581 INFO L470 AbstractCegarLoop]: Abstraction has 520 states and 678 transitions. [2022-01-11 00:04:11,582 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,582 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 678 transitions. [2022-01-11 00:04:11,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-11 00:04:11,583 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,584 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,584 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:04:11,584 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,584 INFO L85 PathProgramCache]: Analyzing trace with hash -544698291, now seen corresponding path program 1 times [2022-01-11 00:04:11,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497111236] [2022-01-11 00:04:11,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,585 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,676 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:11,676 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497111236] [2022-01-11 00:04:11,676 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497111236] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,677 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,677 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:11,677 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919762363] [2022-01-11 00:04:11,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:11,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:11,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,678 INFO L87 Difference]: Start difference. First operand 520 states and 678 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,709 INFO L93 Difference]: Finished difference Result 520 states and 678 transitions. [2022-01-11 00:04:11,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:11,710 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-11 00:04:11,710 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,711 INFO L225 Difference]: With dead ends: 520 [2022-01-11 00:04:11,711 INFO L226 Difference]: Without dead ends: 234 [2022-01-11 00:04:11,711 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:11,712 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 58 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 95 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-01-11 00:04:11,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 234. [2022-01-11 00:04:11,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 233 states have (on average 1.3304721030042919) internal successors, (310), 233 states have internal predecessors, (310), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 310 transitions. [2022-01-11 00:04:11,733 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 310 transitions. Word has length 43 [2022-01-11 00:04:11,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,737 INFO L470 AbstractCegarLoop]: Abstraction has 234 states and 310 transitions. [2022-01-11 00:04:11,737 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,738 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 310 transitions. [2022-01-11 00:04:11,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-01-11 00:04:11,743 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,743 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,744 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:04:11,744 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,744 INFO L85 PathProgramCache]: Analyzing trace with hash -532554927, now seen corresponding path program 1 times [2022-01-11 00:04:11,745 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271231242] [2022-01-11 00:04:11,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,745 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:11,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:11,826 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-11 00:04:11,826 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:11,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271231242] [2022-01-11 00:04:11,827 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271231242] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:11,827 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:11,827 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:11,827 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828996086] [2022-01-11 00:04:11,827 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:11,827 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:11,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:11,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:11,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:11,828 INFO L87 Difference]: Start difference. First operand 234 states and 310 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:11,959 INFO L93 Difference]: Finished difference Result 904 states and 1194 transitions. [2022-01-11 00:04:11,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 00:04:11,960 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-01-11 00:04:11,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:11,963 INFO L225 Difference]: With dead ends: 904 [2022-01-11 00:04:11,964 INFO L226 Difference]: Without dead ends: 678 [2022-01-11 00:04:11,965 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:04:11,966 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 357 mSDsluCounter, 410 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:11,966 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [357 Valid, 534 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:11,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2022-01-11 00:04:11,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 337. [2022-01-11 00:04:11,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 336 states have (on average 1.3125) internal successors, (441), 336 states have internal predecessors, (441), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 441 transitions. [2022-01-11 00:04:11,994 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 441 transitions. Word has length 50 [2022-01-11 00:04:11,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:11,994 INFO L470 AbstractCegarLoop]: Abstraction has 337 states and 441 transitions. [2022-01-11 00:04:11,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:11,995 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 441 transitions. [2022-01-11 00:04:11,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-01-11 00:04:11,995 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:11,996 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:11,996 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:04:11,996 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:11,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:11,997 INFO L85 PathProgramCache]: Analyzing trace with hash -2064484776, now seen corresponding path program 1 times [2022-01-11 00:04:11,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:11,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005229084] [2022-01-11 00:04:11,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:11,997 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:12,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:12,093 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-11 00:04:12,093 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:12,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005229084] [2022-01-11 00:04:12,093 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005229084] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:12,093 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:12,093 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:12,093 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1832726808] [2022-01-11 00:04:12,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:12,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:12,094 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:12,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:12,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:12,094 INFO L87 Difference]: Start difference. First operand 337 states and 441 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:12,183 INFO L93 Difference]: Finished difference Result 826 states and 1076 transitions. [2022-01-11 00:04:12,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:12,184 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-01-11 00:04:12,184 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:12,186 INFO L225 Difference]: With dead ends: 826 [2022-01-11 00:04:12,186 INFO L226 Difference]: Without dead ends: 497 [2022-01-11 00:04:12,186 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:12,187 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 172 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:12,187 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 363 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:12,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2022-01-11 00:04:12,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 283. [2022-01-11 00:04:12,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 282 states have (on average 1.301418439716312) internal successors, (367), 282 states have internal predecessors, (367), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 367 transitions. [2022-01-11 00:04:12,210 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 367 transitions. Word has length 52 [2022-01-11 00:04:12,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:12,211 INFO L470 AbstractCegarLoop]: Abstraction has 283 states and 367 transitions. [2022-01-11 00:04:12,211 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,211 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 367 transitions. [2022-01-11 00:04:12,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-11 00:04:12,212 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:12,212 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:12,213 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:04:12,213 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:12,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:12,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1862694506, now seen corresponding path program 1 times [2022-01-11 00:04:12,213 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:12,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047320690] [2022-01-11 00:04:12,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:12,214 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:12,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:12,288 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:12,289 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:12,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047320690] [2022-01-11 00:04:12,289 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047320690] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:12,289 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:12,289 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:04:12,289 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1851719052] [2022-01-11 00:04:12,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:12,290 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:12,290 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:12,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:12,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:12,291 INFO L87 Difference]: Start difference. First operand 283 states and 367 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:12,377 INFO L93 Difference]: Finished difference Result 786 states and 1012 transitions. [2022-01-11 00:04:12,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:04:12,377 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-11 00:04:12,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:12,379 INFO L225 Difference]: With dead ends: 786 [2022-01-11 00:04:12,379 INFO L226 Difference]: Without dead ends: 511 [2022-01-11 00:04:12,380 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:04:12,382 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 174 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:12,384 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [174 Valid, 441 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:12,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2022-01-11 00:04:12,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 295. [2022-01-11 00:04:12,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295 states, 294 states have (on average 1.2891156462585034) internal successors, (379), 294 states have internal predecessors, (379), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295 states to 295 states and 379 transitions. [2022-01-11 00:04:12,416 INFO L78 Accepts]: Start accepts. Automaton has 295 states and 379 transitions. Word has length 70 [2022-01-11 00:04:12,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:12,418 INFO L470 AbstractCegarLoop]: Abstraction has 295 states and 379 transitions. [2022-01-11 00:04:12,418 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,418 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 379 transitions. [2022-01-11 00:04:12,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-11 00:04:12,419 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:12,419 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:12,419 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:04:12,419 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:12,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:12,420 INFO L85 PathProgramCache]: Analyzing trace with hash 838000585, now seen corresponding path program 1 times [2022-01-11 00:04:12,420 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:12,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594723184] [2022-01-11 00:04:12,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:12,420 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:12,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:12,484 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:12,484 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:12,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594723184] [2022-01-11 00:04:12,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594723184] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:12,485 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:12,485 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:12,485 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1176765815] [2022-01-11 00:04:12,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:12,485 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:04:12,486 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:12,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:04:12,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:04:12,486 INFO L87 Difference]: Start difference. First operand 295 states and 379 transitions. Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:12,575 INFO L93 Difference]: Finished difference Result 826 states and 1052 transitions. [2022-01-11 00:04:12,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:12,575 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-11 00:04:12,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:12,577 INFO L225 Difference]: With dead ends: 826 [2022-01-11 00:04:12,577 INFO L226 Difference]: Without dead ends: 539 [2022-01-11 00:04:12,578 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:12,579 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 147 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:12,579 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [147 Valid, 322 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:12,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2022-01-11 00:04:12,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 303. [2022-01-11 00:04:12,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 302 states have (on average 1.281456953642384) internal successors, (387), 302 states have internal predecessors, (387), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 387 transitions. [2022-01-11 00:04:12,623 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 387 transitions. Word has length 70 [2022-01-11 00:04:12,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:12,623 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 387 transitions. [2022-01-11 00:04:12,623 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,623 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 387 transitions. [2022-01-11 00:04:12,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-11 00:04:12,624 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:12,624 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:12,624 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:04:12,624 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:12,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:12,625 INFO L85 PathProgramCache]: Analyzing trace with hash -345346712, now seen corresponding path program 1 times [2022-01-11 00:04:12,625 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:12,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [444156011] [2022-01-11 00:04:12,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:12,625 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:12,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:12,684 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:12,684 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:12,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [444156011] [2022-01-11 00:04:12,684 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [444156011] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:12,684 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:12,684 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:04:12,684 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234358880] [2022-01-11 00:04:12,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:12,685 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:04:12,685 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:12,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:04:12,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:12,686 INFO L87 Difference]: Start difference. First operand 303 states and 387 transitions. Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:12,873 INFO L93 Difference]: Finished difference Result 1227 states and 1568 transitions. [2022-01-11 00:04:12,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 00:04:12,874 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-11 00:04:12,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:12,877 INFO L225 Difference]: With dead ends: 1227 [2022-01-11 00:04:12,877 INFO L226 Difference]: Without dead ends: 932 [2022-01-11 00:04:12,878 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-11 00:04:12,878 INFO L933 BasicCegarLoop]: 256 mSDtfsCounter, 372 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 372 SdHoareTripleChecker+Valid, 1143 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:12,879 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [372 Valid, 1143 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:12,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 932 states. [2022-01-11 00:04:12,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 932 to 271. [2022-01-11 00:04:12,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 270 states have (on average 1.262962962962963) internal successors, (341), 270 states have internal predecessors, (341), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 341 transitions. [2022-01-11 00:04:12,905 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 341 transitions. Word has length 70 [2022-01-11 00:04:12,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:12,906 INFO L470 AbstractCegarLoop]: Abstraction has 271 states and 341 transitions. [2022-01-11 00:04:12,906 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,906 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 341 transitions. [2022-01-11 00:04:12,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-11 00:04:12,907 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:12,907 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:12,907 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 00:04:12,907 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:12,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:12,908 INFO L85 PathProgramCache]: Analyzing trace with hash -301650876, now seen corresponding path program 1 times [2022-01-11 00:04:12,908 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:12,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [87806770] [2022-01-11 00:04:12,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:12,908 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:12,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:12,943 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 29 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:12,944 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:12,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [87806770] [2022-01-11 00:04:12,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [87806770] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:12,944 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:12,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:12,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411458031] [2022-01-11 00:04:12,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:12,945 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:12,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:12,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:12,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:12,946 INFO L87 Difference]: Start difference. First operand 271 states and 341 transitions. Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:12,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:12,994 INFO L93 Difference]: Finished difference Result 519 states and 656 transitions. [2022-01-11 00:04:12,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:12,995 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-11 00:04:12,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:12,996 INFO L225 Difference]: With dead ends: 519 [2022-01-11 00:04:12,997 INFO L226 Difference]: Without dead ends: 256 [2022-01-11 00:04:12,997 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:12,998 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 27 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:12,998 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 156 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:12,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-01-11 00:04:13,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 249. [2022-01-11 00:04:13,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 248 states have (on average 1.2298387096774193) internal successors, (305), 248 states have internal predecessors, (305), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:13,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 305 transitions. [2022-01-11 00:04:13,025 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 305 transitions. Word has length 71 [2022-01-11 00:04:13,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:13,025 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 305 transitions. [2022-01-11 00:04:13,025 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:13,025 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 305 transitions. [2022-01-11 00:04:13,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-11 00:04:13,030 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:13,031 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:13,031 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 00:04:13,031 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:13,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:13,032 INFO L85 PathProgramCache]: Analyzing trace with hash 2069984652, now seen corresponding path program 1 times [2022-01-11 00:04:13,032 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:13,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739864264] [2022-01-11 00:04:13,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:13,032 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:13,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:13,069 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-11 00:04:13,069 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:13,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739864264] [2022-01-11 00:04:13,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739864264] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:13,070 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:13,070 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:13,070 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444860057] [2022-01-11 00:04:13,070 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:13,070 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:13,070 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:13,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:13,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:13,071 INFO L87 Difference]: Start difference. First operand 249 states and 305 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:13,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:13,118 INFO L93 Difference]: Finished difference Result 475 states and 582 transitions. [2022-01-11 00:04:13,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:13,118 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-11 00:04:13,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:13,118 INFO L225 Difference]: With dead ends: 475 [2022-01-11 00:04:13,119 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:04:13,119 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:13,120 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 28 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:13,120 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 165 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:13,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:04:13,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:04:13,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:13,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:04:13,121 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 75 [2022-01-11 00:04:13,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:13,121 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:04:13,122 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:13,122 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:04:13,122 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:04:13,124 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:04:13,124 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:04:13,125 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:04:13,125 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-11 00:04:13,126 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:04:19,270 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:04:19,270 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:04:19,270 INFO L854 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:19,270 INFO L854 garLoopResultBuilder]: At program point L959(lines 955 961) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:19,279 INFO L854 garLoopResultBuilder]: At program point L974(lines 969 977) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:19,279 INFO L858 garLoopResultBuilder]: For program point L930(lines 930 937) no Hoare annotation was computed. [2022-01-11 00:04:19,279 INFO L854 garLoopResultBuilder]: At program point L903(lines 899 905) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:19,280 INFO L858 garLoopResultBuilder]: For program point L930-2(lines 930 937) no Hoare annotation was computed. [2022-01-11 00:04:19,280 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:04:19,280 INFO L861 garLoopResultBuilder]: At program point L939(lines 920 942) the Hoare annotation is: true [2022-01-11 00:04:19,280 INFO L854 garLoopResultBuilder]: At program point L206-2(lines 206 255) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse9 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9) (and .cse0 .cse11 .cse2 .cse7 .cse9))) [2022-01-11 00:04:19,280 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:04:19,280 INFO L854 garLoopResultBuilder]: At program point L256(lines 205 257) the Hoare annotation is: false [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point L207(lines 206 255) no Hoare annotation was computed. [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point L275-3(lines 275 281) no Hoare annotation was computed. [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point L208(lines 208 212) no Hoare annotation was computed. [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point L104-3(lines 104 108) no Hoare annotation was computed. [2022-01-11 00:04:19,281 INFO L858 garLoopResultBuilder]: For program point L275-5(lines 274 293) no Hoare annotation was computed. [2022-01-11 00:04:19,282 INFO L858 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L854 garLoopResultBuilder]: At program point L104-5(lines 100 111) the Hoare annotation is: false [2022-01-11 00:04:19,283 INFO L858 garLoopResultBuilder]: For program point L333-2(lines 333 350) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L858 garLoopResultBuilder]: For program point L282-3(lines 282 288) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L858 garLoopResultBuilder]: For program point L116(lines 116 120) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L858 garLoopResultBuilder]: For program point L216-2(lines 216 222) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L854 garLoopResultBuilder]: At program point L141-2(lines 136 144) the Hoare annotation is: false [2022-01-11 00:04:19,283 INFO L858 garLoopResultBuilder]: For program point L307-6(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,283 INFO L854 garLoopResultBuilder]: At program point L141-3(lines 136 144) the Hoare annotation is: false [2022-01-11 00:04:19,283 INFO L854 garLoopResultBuilder]: At program point L116-2(lines 112 123) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse9 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9) (and .cse0 .cse11 .cse2 .cse7 .cse9))) [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L226(lines 226 232) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L377-1(lines 370 380) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L181-3(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L299-7(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L70-2(lines 70 87) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L128(lines 128 132) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L226-2(lines 226 232) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L337-3(lines 337 345) no Hoare annotation was computed. [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L186-3(lines 177 190) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L307-7(lines 303 327) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L386-1(lines 381 389) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L70-3(lines 62 90) the Hoare annotation is: false [2022-01-11 00:04:19,284 INFO L854 garLoopResultBuilder]: At program point L128-2(lines 124 135) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-11 00:04:19,284 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 251) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L367-2(lines 362 369) the Hoare annotation is: false [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L307-4(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L435-9(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L333-3(lines 329 353) the Hoare annotation is: false [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L74-2(lines 74 84) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L292-1(lines 271 294) the Hoare annotation is: false [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L465(lines 460 467) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4) (and .cse0 .cse2 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse5) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse5))) [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L244(lines 244 250) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L181-2(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L299-5(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L435-11(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L75-3(lines 75 81) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L854 garLoopResultBuilder]: At program point L855-2(lines 855 869) the Hoare annotation is: false [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L244-2(lines 236 251) no Hoare annotation was computed. [2022-01-11 00:04:19,285 INFO L858 garLoopResultBuilder]: For program point L449(lines 449 455) no Hoare annotation was computed. [2022-01-11 00:04:19,286 INFO L854 garLoopResultBuilder]: At program point L186-2(lines 177 190) the Hoare annotation is: false [2022-01-11 00:04:19,286 INFO L854 garLoopResultBuilder]: At program point L307-5(lines 303 327) the Hoare annotation is: false [2022-01-11 00:04:19,286 INFO L854 garLoopResultBuilder]: At program point L441-3(lines 426 444) the Hoare annotation is: false [2022-01-11 00:04:19,286 INFO L858 garLoopResultBuilder]: For program point L839-1(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,286 INFO L861 garLoopResultBuilder]: At program point L870(lines 845 874) the Hoare annotation is: true [2022-01-11 00:04:19,286 INFO L858 garLoopResultBuilder]: For program point L856(line 856) no Hoare annotation was computed. [2022-01-11 00:04:19,286 INFO L858 garLoopResultBuilder]: For program point L275(lines 275 281) no Hoare annotation was computed. [2022-01-11 00:04:19,286 INFO L854 garLoopResultBuilder]: At program point L367(lines 362 369) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 00:04:19,286 INFO L858 garLoopResultBuilder]: For program point L449-2(lines 449 455) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L435-6(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L311-9(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L854 garLoopResultBuilder]: At program point L840-1(lines 835 842) the Hoare annotation is: false [2022-01-11 00:04:19,287 INFO L861 garLoopResultBuilder]: At program point L261(lines 196 263) the Hoare annotation is: true [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L859(lines 859 863) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L275-2(lines 274 293) no Hoare annotation was computed. [2022-01-11 00:04:19,287 INFO L854 garLoopResultBuilder]: At program point L457(lines 445 459) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:04:19,287 INFO L858 garLoopResultBuilder]: For program point L435-8(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,288 INFO L854 garLoopResultBuilder]: At program point L359-3(lines 354 361) the Hoare annotation is: false [2022-01-11 00:04:19,288 INFO L854 garLoopResultBuilder]: At program point L299-6(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,288 INFO L861 garLoopResultBuilder]: At program point L914(lines 906 916) the Hoare annotation is: true [2022-01-11 00:04:19,288 INFO L858 garLoopResultBuilder]: For program point L859-1(lines 859 863) no Hoare annotation was computed. [2022-01-11 00:04:19,288 INFO L854 garLoopResultBuilder]: At program point L104-2(lines 100 111) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-11 00:04:19,288 INFO L858 garLoopResultBuilder]: For program point L333(lines 333 350) no Hoare annotation was computed. [2022-01-11 00:04:19,288 INFO L858 garLoopResultBuilder]: For program point L282-1(lines 282 288) no Hoare annotation was computed. [2022-01-11 00:04:19,288 INFO L854 garLoopResultBuilder]: At program point L441-2(lines 426 444) the Hoare annotation is: false [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L275-6(lines 275 281) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L141(lines 136 144) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L307-2(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L141-1(lines 136 144) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L311-6(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L104-6(lines 104 108) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L275-8(lines 274 293) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L377(lines 370 380) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L181-1(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L299-3(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed. [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L359-2(lines 354 361) the Hoare annotation is: false [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L299-4(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,289 INFO L854 garLoopResultBuilder]: At program point L104-8(lines 100 111) the Hoare annotation is: false [2022-01-11 00:04:19,289 INFO L858 garLoopResultBuilder]: For program point L333-4(lines 333 350) no Hoare annotation was computed. [2022-01-11 00:04:19,290 INFO L858 garLoopResultBuilder]: For program point L282-5(lines 282 288) no Hoare annotation was computed. [2022-01-11 00:04:19,290 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 345) no Hoare annotation was computed. [2022-01-11 00:04:19,290 INFO L854 garLoopResultBuilder]: At program point L186-1(lines 177 190) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L307-3(lines 303 327) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L386(lines 381 389) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L70-1(lines 62 90) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse0 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9 .cse3))) [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L141-4(lines 136 144) the Hoare annotation is: false [2022-01-11 00:04:19,291 INFO L858 garLoopResultBuilder]: For program point L307-10(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L141-5(lines 136 144) the Hoare annotation is: false [2022-01-11 00:04:19,291 INFO L854 garLoopResultBuilder]: At program point L367-1(lines 362 369) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L307(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L435-3(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L854 garLoopResultBuilder]: At program point L333-1(lines 329 353) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L854 garLoopResultBuilder]: At program point L292(lines 271 294) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0Int)) (.cse10 (= ~systemActive~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 0)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (= ~methAndRunningLastTime~0Int 0)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse9 .cse3) (and .cse0 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse5 .cse6 .cse2 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse1 .cse2 .cse9 .cse3))) [2022-01-11 00:04:19,292 INFO L854 garLoopResultBuilder]: At program point L377-2(lines 370 380) the Hoare annotation is: false [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L181-5(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L854 garLoopResultBuilder]: At program point L299-11(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L70-4(lines 70 87) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,292 INFO L854 garLoopResultBuilder]: At program point L299-1(lines 295 301) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 00:04:19,292 INFO L858 garLoopResultBuilder]: For program point L435-5(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,293 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-01-11 00:04:19,293 INFO L858 garLoopResultBuilder]: For program point L337-6(lines 337 345) no Hoare annotation was computed. [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L186-5(lines 177 190) the Hoare annotation is: false [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L307-11(lines 303 327) the Hoare annotation is: false [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L386-2(lines 381 389) the Hoare annotation is: false [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L70-5(lines 62 90) the Hoare annotation is: false [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L186(lines 177 190) the Hoare annotation is: false [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L307-1(lines 303 327) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 00:04:19,293 INFO L854 garLoopResultBuilder]: At program point L441-1(lines 426 444) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int|)))) [2022-01-11 00:04:19,293 INFO L858 garLoopResultBuilder]: For program point L839(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L854 garLoopResultBuilder]: At program point L367-3(lines 362 369) the Hoare annotation is: false [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L307-8(lines 307 324) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L435-15(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L854 garLoopResultBuilder]: At program point L333-5(lines 329 353) the Hoare annotation is: false [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L74-4(lines 74 84) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L854 garLoopResultBuilder]: At program point L292-2(lines 271 294) the Hoare annotation is: false [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L435(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L311-3(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L854 garLoopResultBuilder]: At program point L840(lines 835 842) the Hoare annotation is: false [2022-01-11 00:04:19,294 INFO L858 garLoopResultBuilder]: For program point L181-4(lines 181 187) no Hoare annotation was computed. [2022-01-11 00:04:19,294 INFO L854 garLoopResultBuilder]: At program point L299-9(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,295 INFO L858 garLoopResultBuilder]: For program point L435-17(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,295 INFO L858 garLoopResultBuilder]: For program point L75-6(lines 75 81) no Hoare annotation was computed. [2022-01-11 00:04:19,295 INFO L858 garLoopResultBuilder]: For program point L435-2(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,295 INFO L854 garLoopResultBuilder]: At program point L359-1(lines 354 361) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 00:04:19,295 INFO L854 garLoopResultBuilder]: At program point L299-2(lines 295 301) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) [2022-01-11 00:04:19,295 INFO L854 garLoopResultBuilder]: At program point L186-4(lines 177 190) the Hoare annotation is: false [2022-01-11 00:04:19,295 INFO L854 garLoopResultBuilder]: At program point L307-9(lines 303 327) the Hoare annotation is: false [2022-01-11 00:04:19,296 INFO L854 garLoopResultBuilder]: At program point L441-5(lines 426 444) the Hoare annotation is: false [2022-01-11 00:04:19,296 INFO L858 garLoopResultBuilder]: For program point L839-2(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,296 INFO L854 garLoopResultBuilder]: At program point L441(lines 426 444) the Hoare annotation is: false [2022-01-11 00:04:19,297 INFO L858 garLoopResultBuilder]: For program point L435-12(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,297 INFO L858 garLoopResultBuilder]: For program point L311-15(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,297 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-01-11 00:04:19,297 INFO L854 garLoopResultBuilder]: At program point L840-2(lines 835 842) the Hoare annotation is: false [2022-01-11 00:04:19,297 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,297 INFO L858 garLoopResultBuilder]: For program point L435-14(lines 435 439) no Hoare annotation was computed. [2022-01-11 00:04:19,297 INFO L854 garLoopResultBuilder]: At program point L359-5(lines 354 361) the Hoare annotation is: false [2022-01-11 00:04:19,297 INFO L854 garLoopResultBuilder]: At program point L299-10(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,297 INFO L854 garLoopResultBuilder]: At program point L359(lines 354 361) the Hoare annotation is: false [2022-01-11 00:04:19,297 INFO L854 garLoopResultBuilder]: At program point L299(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,298 INFO L854 garLoopResultBuilder]: At program point L441-4(lines 426 444) the Hoare annotation is: false [2022-01-11 00:04:19,298 INFO L858 garLoopResultBuilder]: For program point L311-12(lines 311 319) no Hoare annotation was computed. [2022-01-11 00:04:19,298 INFO L854 garLoopResultBuilder]: At program point L359-4(lines 354 361) the Hoare annotation is: false [2022-01-11 00:04:19,298 INFO L854 garLoopResultBuilder]: At program point L299-8(lines 295 301) the Hoare annotation is: false [2022-01-11 00:04:19,300 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:19,301 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:04:19,364 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:04:19 BasicIcfg [2022-01-11 00:04:19,364 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:04:19,364 INFO L158 Benchmark]: Toolchain (without parser) took 9940.09ms. Allocated memory was 195.0MB in the beginning and 444.6MB in the end (delta: 249.6MB). Free memory was 138.1MB in the beginning and 351.1MB in the end (delta: -212.9MB). Peak memory consumption was 234.5MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 195.0MB. Free memory is still 155.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: CACSL2BoogieTranslator took 415.67ms. Allocated memory was 195.0MB in the beginning and 308.3MB in the end (delta: 113.2MB). Free memory was 137.9MB in the beginning and 263.9MB in the end (delta: -126.0MB). Peak memory consumption was 8.6MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: Boogie Procedure Inliner took 41.49ms. Allocated memory is still 308.3MB. Free memory was 263.9MB in the beginning and 260.7MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: Boogie Preprocessor took 25.31ms. Allocated memory is still 308.3MB. Free memory was 260.7MB in the beginning and 258.1MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: RCFGBuilder took 538.33ms. Allocated memory is still 308.3MB. Free memory was 258.1MB in the beginning and 234.0MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,365 INFO L158 Benchmark]: IcfgTransformer took 128.31ms. Allocated memory is still 308.3MB. Free memory was 234.0MB in the beginning and 224.6MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,366 INFO L158 Benchmark]: TraceAbstraction took 8785.74ms. Allocated memory was 308.3MB in the beginning and 444.6MB in the end (delta: 136.3MB). Free memory was 224.0MB in the beginning and 351.1MB in the end (delta: -127.0MB). Peak memory consumption was 208.0MB. Max. memory is 8.0GB. [2022-01-11 00:04:19,367 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 195.0MB. Free memory is still 155.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 415.67ms. Allocated memory was 195.0MB in the beginning and 308.3MB in the end (delta: 113.2MB). Free memory was 137.9MB in the beginning and 263.9MB in the end (delta: -126.0MB). Peak memory consumption was 8.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 41.49ms. Allocated memory is still 308.3MB. Free memory was 263.9MB in the beginning and 260.7MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 25.31ms. Allocated memory is still 308.3MB. Free memory was 260.7MB in the beginning and 258.1MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 538.33ms. Allocated memory is still 308.3MB. Free memory was 258.1MB in the beginning and 234.0MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 128.31ms. Allocated memory is still 308.3MB. Free memory was 234.0MB in the beginning and 224.6MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 8785.74ms. Allocated memory was 308.3MB in the beginning and 444.6MB in the end (delta: 136.3MB). Free memory was 224.0MB in the beginning and 351.1MB in the end (delta: -127.0MB). Peak memory consumption was 208.0MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 168 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1836 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1836 mSDsluCounter, 4441 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2544 mSDsCounter, 88 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 268 IncrementalHoareTripleChecker+Invalid, 356 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 88 mSolverCounterUnsat, 1897 mSDtfsCounter, 268 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=520occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1690 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 83 LocationsWithAnnotation, 83 PreInvPairs, 170 NumberOfFragments, 1881 HoareAnnotationTreeSize, 83 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 83 FomulaSimplificationsInter, 277599 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 595 NumberOfCodeBlocks, 595 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 583 ConstructedInterpolants, 0 QuantifiedInterpolants, 1146 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 155/155 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 206]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 112]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 205]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 124]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-01-11 00:04:19,435 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...