/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 05:52:01,537 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 05:52:01,539 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 05:52:01,617 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 05:52:01,617 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 05:52:01,618 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 05:52:01,620 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 05:52:01,628 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 05:52:01,640 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 05:52:01,641 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 05:52:01,646 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 05:52:01,647 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 05:52:01,647 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 05:52:01,648 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 05:52:01,648 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 05:52:01,654 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 05:52:01,655 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 05:52:01,656 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 05:52:01,664 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 05:52:01,665 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 05:52:01,666 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 05:52:01,673 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 05:52:01,673 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 05:52:01,674 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 05:52:01,684 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 05:52:01,684 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 05:52:01,684 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 05:52:01,687 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 05:52:01,687 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 05:52:01,688 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 05:52:01,688 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 05:52:01,689 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 05:52:01,689 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 05:52:01,689 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 05:52:01,690 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 05:52:01,690 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 05:52:01,697 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 05:52:01,697 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 05:52:01,698 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 05:52:01,699 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 05:52:01,699 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 05:52:01,705 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf [2022-01-11 05:52:01,729 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 05:52:01,729 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 05:52:01,729 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 05:52:01,729 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 05:52:01,730 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 05:52:01,730 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 05:52:01,730 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 05:52:01,731 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 05:52:01,731 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:52:01,731 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 05:52:01,732 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 05:52:01,733 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 05:52:01,733 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_SUM WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 05:52:02,117 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 05:52:02,146 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 05:52:02,148 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 05:52:02,152 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 05:52:02,152 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 05:52:02,153 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-11 05:52:02,253 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb2f923ad/51e0f3e46bd24e53811465dc87213d62/FLAG87a6904d5 [2022-01-11 05:52:02,648 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 05:52:02,648 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c [2022-01-11 05:52:02,663 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb2f923ad/51e0f3e46bd24e53811465dc87213d62/FLAG87a6904d5 [2022-01-11 05:52:02,675 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb2f923ad/51e0f3e46bd24e53811465dc87213d62 [2022-01-11 05:52:02,677 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 05:52:02,679 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 05:52:02,680 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 05:52:02,680 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 05:52:02,682 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 05:52:02,683 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:52:02" (1/1) ... [2022-01-11 05:52:02,684 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4097b62e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:02, skipping insertion in model container [2022-01-11 05:52:02,684 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:52:02" (1/1) ... [2022-01-11 05:52:02,688 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 05:52:02,727 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:52:02,925 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 05:52:02,973 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:02,982 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 05:52:02,987 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:52:02,997 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 05:52:03,025 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:03,029 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 05:52:03,044 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-01-11 05:52:03,076 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:03,095 INFO L208 MainTranslator]: Completed translation [2022-01-11 05:52:03,095 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03 WrapperNode [2022-01-11 05:52:03,095 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 05:52:03,096 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 05:52:03,096 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 05:52:03,096 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 05:52:03,101 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,115 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,143 INFO L137 Inliner]: procedures = 57, calls = 156, calls flagged for inlining = 53, calls inlined = 80, statements flattened = 604 [2022-01-11 05:52:03,143 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 05:52:03,144 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 05:52:03,144 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 05:52:03,144 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 05:52:03,153 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,169 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,169 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,191 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,197 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,198 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,201 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 05:52:03,202 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 05:52:03,202 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 05:52:03,202 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 05:52:03,219 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,228 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:52:03,238 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 05:52:03,252 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 05:52:03,268 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 05:52:03,279 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 05:52:03,279 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 05:52:03,279 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 05:52:03,279 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 05:52:03,336 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 05:52:03,338 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 05:52:03,794 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 05:52:03,801 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 05:52:03,801 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 05:52:03,803 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:03 BoogieIcfgContainer [2022-01-11 05:52:03,803 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 05:52:03,804 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 05:52:03,804 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 05:52:03,808 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 05:52:03,810 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:03" (1/1) ... [2022-01-11 05:52:03,909 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:52:03 BasicIcfg [2022-01-11 05:52:03,909 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 05:52:03,910 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 05:52:03,910 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 05:52:03,913 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 05:52:03,913 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 05:52:02" (1/4) ... [2022-01-11 05:52:03,914 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1893f73b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:52:03, skipping insertion in model container [2022-01-11 05:52:03,914 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:03" (2/4) ... [2022-01-11 05:52:03,914 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1893f73b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:52:03, skipping insertion in model container [2022-01-11 05:52:03,914 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:03" (3/4) ... [2022-01-11 05:52:03,915 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1893f73b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:52:03, skipping insertion in model container [2022-01-11 05:52:03,915 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:52:03" (4/4) ... [2022-01-11 05:52:03,916 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.cTransformedIcfg [2022-01-11 05:52:03,920 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 05:52:03,920 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 05:52:03,959 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 05:52:03,964 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 05:52:03,964 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 05:52:03,978 INFO L276 IsEmpty]: Start isEmpty. Operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:03,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 05:52:03,983 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:03,983 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:03,984 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:03,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:03,988 INFO L85 PathProgramCache]: Analyzing trace with hash -429092198, now seen corresponding path program 1 times [2022-01-11 05:52:03,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:03,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853442731] [2022-01-11 05:52:03,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:03,995 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:04,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:04,145 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:04,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853442731] [2022-01-11 05:52:04,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853442731] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:04,146 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:04,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:04,147 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834289557] [2022-01-11 05:52:04,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:04,153 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 05:52:04,153 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:04,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 05:52:04,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:52:04,186 INFO L87 Difference]: Start difference. First operand has 167 states, 163 states have (on average 1.3987730061349692) internal successors, (228), 166 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:04,230 INFO L93 Difference]: Finished difference Result 323 states and 444 transitions. [2022-01-11 05:52:04,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 05:52:04,240 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 05:52:04,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:04,251 INFO L225 Difference]: With dead ends: 323 [2022-01-11 05:52:04,252 INFO L226 Difference]: Without dead ends: 157 [2022-01-11 05:52:04,255 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:52:04,260 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:04,261 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:04,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-01-11 05:52:04,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-01-11 05:52:04,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.3636363636363635) internal successors, (210), 156 states have internal predecessors, (210), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 210 transitions. [2022-01-11 05:52:04,299 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 210 transitions. Word has length 19 [2022-01-11 05:52:04,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:04,299 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 210 transitions. [2022-01-11 05:52:04,299 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,300 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 210 transitions. [2022-01-11 05:52:04,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 05:52:04,300 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:04,301 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:04,301 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 05:52:04,301 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:04,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:04,302 INFO L85 PathProgramCache]: Analyzing trace with hash 2048464979, now seen corresponding path program 1 times [2022-01-11 05:52:04,302 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:04,302 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849020280] [2022-01-11 05:52:04,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:04,302 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:04,373 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:04,373 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:04,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849020280] [2022-01-11 05:52:04,373 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849020280] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:04,373 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:04,374 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:04,374 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565760838] [2022-01-11 05:52:04,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:04,375 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:04,375 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:04,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:04,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,375 INFO L87 Difference]: Start difference. First operand 157 states and 210 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:04,421 INFO L93 Difference]: Finished difference Result 370 states and 499 transitions. [2022-01-11 05:52:04,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:04,421 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 05:52:04,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:04,423 INFO L225 Difference]: With dead ends: 370 [2022-01-11 05:52:04,423 INFO L226 Difference]: Without dead ends: 221 [2022-01-11 05:52:04,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,424 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 193 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:04,425 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 300 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:04,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-01-11 05:52:04,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 212. [2022-01-11 05:52:04,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 209 states have (on average 1.3732057416267942) internal successors, (287), 211 states have internal predecessors, (287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 287 transitions. [2022-01-11 05:52:04,439 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 287 transitions. Word has length 20 [2022-01-11 05:52:04,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:04,439 INFO L470 AbstractCegarLoop]: Abstraction has 212 states and 287 transitions. [2022-01-11 05:52:04,439 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,439 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 287 transitions. [2022-01-11 05:52:04,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-11 05:52:04,440 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:04,440 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:04,440 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 05:52:04,441 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:04,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:04,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1951981762, now seen corresponding path program 1 times [2022-01-11 05:52:04,441 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:04,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1097858539] [2022-01-11 05:52:04,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:04,442 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:04,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:04,486 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:04,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1097858539] [2022-01-11 05:52:04,486 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1097858539] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:04,486 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:04,486 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:04,487 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [964597449] [2022-01-11 05:52:04,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:04,487 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:04,487 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:04,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:04,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,488 INFO L87 Difference]: Start difference. First operand 212 states and 287 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:04,573 INFO L93 Difference]: Finished difference Result 475 states and 642 transitions. [2022-01-11 05:52:04,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:04,574 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-11 05:52:04,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:04,575 INFO L225 Difference]: With dead ends: 475 [2022-01-11 05:52:04,575 INFO L226 Difference]: Without dead ends: 271 [2022-01-11 05:52:04,576 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,577 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 141 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:04,577 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 295 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:52:04,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-01-11 05:52:04,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 265. [2022-01-11 05:52:04,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.3244274809160306) internal successors, (347), 264 states have internal predecessors, (347), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 347 transitions. [2022-01-11 05:52:04,592 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 347 transitions. Word has length 25 [2022-01-11 05:52:04,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:04,593 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 347 transitions. [2022-01-11 05:52:04,593 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,593 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 347 transitions. [2022-01-11 05:52:04,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-11 05:52:04,594 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:04,594 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:04,594 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 05:52:04,594 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:04,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:04,594 INFO L85 PathProgramCache]: Analyzing trace with hash -582203850, now seen corresponding path program 1 times [2022-01-11 05:52:04,595 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:04,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137856070] [2022-01-11 05:52:04,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:04,595 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:04,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:04,686 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:04,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137856070] [2022-01-11 05:52:04,687 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137856070] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:04,687 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:04,687 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:04,687 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625729133] [2022-01-11 05:52:04,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:04,688 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:04,688 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:04,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:04,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,688 INFO L87 Difference]: Start difference. First operand 265 states and 347 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:04,748 INFO L93 Difference]: Finished difference Result 522 states and 686 transitions. [2022-01-11 05:52:04,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:04,764 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-11 05:52:04,764 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:04,766 INFO L225 Difference]: With dead ends: 522 [2022-01-11 05:52:04,767 INFO L226 Difference]: Without dead ends: 516 [2022-01-11 05:52:04,767 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,768 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 166 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:04,768 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 385 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:04,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 516 states. [2022-01-11 05:52:04,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 516 to 516. [2022-01-11 05:52:04,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 513 states have (on average 1.3138401559454191) internal successors, (674), 515 states have internal predecessors, (674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 674 transitions. [2022-01-11 05:52:04,800 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 674 transitions. Word has length 30 [2022-01-11 05:52:04,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:04,800 INFO L470 AbstractCegarLoop]: Abstraction has 516 states and 674 transitions. [2022-01-11 05:52:04,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,801 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 674 transitions. [2022-01-11 05:52:04,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-11 05:52:04,803 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:04,803 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:04,803 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 05:52:04,803 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:04,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:04,804 INFO L85 PathProgramCache]: Analyzing trace with hash 714549505, now seen corresponding path program 1 times [2022-01-11 05:52:04,804 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:04,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596783526] [2022-01-11 05:52:04,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:04,804 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:04,881 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:04,881 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:04,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596783526] [2022-01-11 05:52:04,881 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1596783526] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:04,882 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:04,882 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:04,883 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [373180427] [2022-01-11 05:52:04,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:04,883 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:04,884 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:04,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:04,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,885 INFO L87 Difference]: Start difference. First operand 516 states and 674 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:04,914 INFO L93 Difference]: Finished difference Result 516 states and 674 transitions. [2022-01-11 05:52:04,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:04,915 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-11 05:52:04,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:04,916 INFO L225 Difference]: With dead ends: 516 [2022-01-11 05:52:04,916 INFO L226 Difference]: Without dead ends: 230 [2022-01-11 05:52:04,918 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:04,922 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 57 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:04,922 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:04,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2022-01-11 05:52:04,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2022-01-11 05:52:04,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 229 states have (on average 1.3362445414847162) internal successors, (306), 229 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 306 transitions. [2022-01-11 05:52:04,936 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 306 transitions. Word has length 43 [2022-01-11 05:52:04,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:04,936 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 306 transitions. [2022-01-11 05:52:04,936 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:04,937 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 306 transitions. [2022-01-11 05:52:04,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-01-11 05:52:04,937 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:04,938 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:04,938 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 05:52:04,938 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:04,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:04,938 INFO L85 PathProgramCache]: Analyzing trace with hash 683143848, now seen corresponding path program 1 times [2022-01-11 05:52:04,938 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:04,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512522407] [2022-01-11 05:52:04,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:04,939 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:04,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:05,049 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-11 05:52:05,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:05,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [512522407] [2022-01-11 05:52:05,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [512522407] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:05,050 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:05,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:05,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1162937302] [2022-01-11 05:52:05,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:05,050 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:05,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:05,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:05,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:05,051 INFO L87 Difference]: Start difference. First operand 230 states and 306 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:05,174 INFO L93 Difference]: Finished difference Result 884 states and 1174 transitions. [2022-01-11 05:52:05,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 05:52:05,175 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-01-11 05:52:05,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:05,178 INFO L225 Difference]: With dead ends: 884 [2022-01-11 05:52:05,178 INFO L226 Difference]: Without dead ends: 662 [2022-01-11 05:52:05,178 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 05:52:05,182 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 352 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 525 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:05,183 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [352 Valid, 525 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:05,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2022-01-11 05:52:05,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 331. [2022-01-11 05:52:05,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 330 states have (on average 1.3181818181818181) internal successors, (435), 330 states have internal predecessors, (435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 435 transitions. [2022-01-11 05:52:05,208 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 435 transitions. Word has length 49 [2022-01-11 05:52:05,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:05,208 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 435 transitions. [2022-01-11 05:52:05,208 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,208 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 435 transitions. [2022-01-11 05:52:05,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-11 05:52:05,211 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:05,211 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:05,211 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 05:52:05,211 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:05,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:05,212 INFO L85 PathProgramCache]: Analyzing trace with hash -181742847, now seen corresponding path program 1 times [2022-01-11 05:52:05,212 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:05,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [298115196] [2022-01-11 05:52:05,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:05,212 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:05,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:05,298 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-11 05:52:05,298 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:05,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [298115196] [2022-01-11 05:52:05,299 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [298115196] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:05,299 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:05,300 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:05,300 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683167938] [2022-01-11 05:52:05,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:05,300 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:05,300 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:05,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:05,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:05,301 INFO L87 Difference]: Start difference. First operand 331 states and 435 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:05,381 INFO L93 Difference]: Finished difference Result 811 states and 1061 transitions. [2022-01-11 05:52:05,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 05:52:05,381 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-01-11 05:52:05,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:05,383 INFO L225 Difference]: With dead ends: 811 [2022-01-11 05:52:05,383 INFO L226 Difference]: Without dead ends: 488 [2022-01-11 05:52:05,384 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-11 05:52:05,386 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 168 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 357 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:05,386 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 357 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:05,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 488 states. [2022-01-11 05:52:05,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 488 to 278. [2022-01-11 05:52:05,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 277 states have (on average 1.3068592057761732) internal successors, (362), 277 states have internal predecessors, (362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 362 transitions. [2022-01-11 05:52:05,408 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 362 transitions. Word has length 51 [2022-01-11 05:52:05,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:05,408 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 362 transitions. [2022-01-11 05:52:05,408 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,408 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 362 transitions. [2022-01-11 05:52:05,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 05:52:05,409 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:05,410 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:05,410 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 05:52:05,410 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:05,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:05,411 INFO L85 PathProgramCache]: Analyzing trace with hash 637933471, now seen corresponding path program 1 times [2022-01-11 05:52:05,411 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:05,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1922970883] [2022-01-11 05:52:05,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:05,411 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:05,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:05,479 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:05,479 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:05,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1922970883] [2022-01-11 05:52:05,479 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1922970883] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:05,479 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:05,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:52:05,479 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1847868617] [2022-01-11 05:52:05,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:05,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:05,480 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:05,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:05,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:05,481 INFO L87 Difference]: Start difference. First operand 278 states and 362 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:05,551 INFO L93 Difference]: Finished difference Result 772 states and 998 transitions. [2022-01-11 05:52:05,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 05:52:05,551 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 05:52:05,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:05,553 INFO L225 Difference]: With dead ends: 772 [2022-01-11 05:52:05,553 INFO L226 Difference]: Without dead ends: 502 [2022-01-11 05:52:05,554 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:52:05,555 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 170 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:05,556 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [170 Valid, 434 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:05,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-01-11 05:52:05,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 290. [2022-01-11 05:52:05,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 289 states have (on average 1.2941176470588236) internal successors, (374), 289 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 374 transitions. [2022-01-11 05:52:05,585 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 374 transitions. Word has length 68 [2022-01-11 05:52:05,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:05,586 INFO L470 AbstractCegarLoop]: Abstraction has 290 states and 374 transitions. [2022-01-11 05:52:05,586 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 5 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,586 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 374 transitions. [2022-01-11 05:52:05,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 05:52:05,586 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:05,587 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:05,587 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 05:52:05,587 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:05,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:05,587 INFO L85 PathProgramCache]: Analyzing trace with hash 189236832, now seen corresponding path program 1 times [2022-01-11 05:52:05,587 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:05,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [742004796] [2022-01-11 05:52:05,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:05,588 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:05,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:05,639 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:05,639 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:05,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [742004796] [2022-01-11 05:52:05,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [742004796] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:05,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:05,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:05,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [8374191] [2022-01-11 05:52:05,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:05,640 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 05:52:05,640 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:05,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 05:52:05,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 05:52:05,641 INFO L87 Difference]: Start difference. First operand 290 states and 374 transitions. Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:05,715 INFO L93 Difference]: Finished difference Result 812 states and 1038 transitions. [2022-01-11 05:52:05,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 05:52:05,715 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 05:52:05,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:05,717 INFO L225 Difference]: With dead ends: 812 [2022-01-11 05:52:05,717 INFO L226 Difference]: Without dead ends: 530 [2022-01-11 05:52:05,718 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:05,719 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 144 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 317 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:05,719 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 317 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:05,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-01-11 05:52:05,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 298. [2022-01-11 05:52:05,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 297 states have (on average 1.2861952861952861) internal successors, (382), 297 states have internal predecessors, (382), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 382 transitions. [2022-01-11 05:52:05,750 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 382 transitions. Word has length 68 [2022-01-11 05:52:05,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:05,750 INFO L470 AbstractCegarLoop]: Abstraction has 298 states and 382 transitions. [2022-01-11 05:52:05,750 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:05,750 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 382 transitions. [2022-01-11 05:52:05,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-11 05:52:05,751 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:05,751 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:05,751 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 05:52:05,751 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:05,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:05,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1511503647, now seen corresponding path program 1 times [2022-01-11 05:52:05,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:05,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9373072] [2022-01-11 05:52:05,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:05,752 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:05,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:05,825 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-11 05:52:05,825 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:05,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9373072] [2022-01-11 05:52:05,825 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9373072] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:05,825 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:05,825 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 05:52:05,826 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [40777375] [2022-01-11 05:52:05,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:05,826 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 05:52:05,826 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:05,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 05:52:05,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 05:52:05,827 INFO L87 Difference]: Start difference. First operand 298 states and 382 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:06,015 INFO L93 Difference]: Finished difference Result 1184 states and 1525 transitions. [2022-01-11 05:52:06,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 05:52:06,015 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-11 05:52:06,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:06,019 INFO L225 Difference]: With dead ends: 1184 [2022-01-11 05:52:06,019 INFO L226 Difference]: Without dead ends: 894 [2022-01-11 05:52:06,020 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-11 05:52:06,020 INFO L933 BasicCegarLoop]: 251 mSDtfsCounter, 364 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 364 SdHoareTripleChecker+Valid, 1118 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:06,021 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [364 Valid, 1118 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:06,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 894 states. [2022-01-11 05:52:06,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 894 to 266. [2022-01-11 05:52:06,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 265 states have (on average 1.2679245283018867) internal successors, (336), 265 states have internal predecessors, (336), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 336 transitions. [2022-01-11 05:52:06,048 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 336 transitions. Word has length 68 [2022-01-11 05:52:06,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:06,049 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 336 transitions. [2022-01-11 05:52:06,049 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 6 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,049 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 336 transitions. [2022-01-11 05:52:06,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-11 05:52:06,049 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:06,049 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:06,050 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 05:52:06,050 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:06,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:06,050 INFO L85 PathProgramCache]: Analyzing trace with hash -1381747203, now seen corresponding path program 1 times [2022-01-11 05:52:06,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:06,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422707899] [2022-01-11 05:52:06,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:06,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:06,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:06,084 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:06,085 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:06,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422707899] [2022-01-11 05:52:06,085 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422707899] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:06,085 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:06,085 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:06,085 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584403146] [2022-01-11 05:52:06,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:06,085 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:06,086 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:06,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:06,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:06,086 INFO L87 Difference]: Start difference. First operand 266 states and 336 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:06,124 INFO L93 Difference]: Finished difference Result 509 states and 646 transitions. [2022-01-11 05:52:06,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:06,125 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-11 05:52:06,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:06,127 INFO L225 Difference]: With dead ends: 509 [2022-01-11 05:52:06,128 INFO L226 Difference]: Without dead ends: 251 [2022-01-11 05:52:06,128 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:06,128 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 27 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:06,129 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 153 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:06,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-01-11 05:52:06,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 245. [2022-01-11 05:52:06,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 244 states have (on average 1.2336065573770492) internal successors, (301), 244 states have internal predecessors, (301), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 301 transitions. [2022-01-11 05:52:06,152 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 301 transitions. Word has length 69 [2022-01-11 05:52:06,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:06,152 INFO L470 AbstractCegarLoop]: Abstraction has 245 states and 301 transitions. [2022-01-11 05:52:06,152 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,152 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 301 transitions. [2022-01-11 05:52:06,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-11 05:52:06,154 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:06,154 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:06,154 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 05:52:06,154 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:06,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:06,155 INFO L85 PathProgramCache]: Analyzing trace with hash -1490070595, now seen corresponding path program 1 times [2022-01-11 05:52:06,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:06,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967501716] [2022-01-11 05:52:06,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:06,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:06,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:06,186 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-11 05:52:06,186 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:06,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1967501716] [2022-01-11 05:52:06,186 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1967501716] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:06,186 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:06,187 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:06,187 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1847404522] [2022-01-11 05:52:06,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:06,187 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:06,187 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:06,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:06,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:06,188 INFO L87 Difference]: Start difference. First operand 245 states and 301 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:06,214 INFO L93 Difference]: Finished difference Result 467 states and 574 transitions. [2022-01-11 05:52:06,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:06,215 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-11 05:52:06,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:06,215 INFO L225 Difference]: With dead ends: 467 [2022-01-11 05:52:06,215 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 05:52:06,216 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:06,216 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 29 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:06,216 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 164 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:06,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 05:52:06,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 05:52:06,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 05:52:06,217 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 74 [2022-01-11 05:52:06,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:06,217 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 05:52:06,217 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:06,217 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 05:52:06,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 05:52:06,219 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 05:52:06,219 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 05:52:06,219 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 05:52:06,220 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-11 05:52:06,221 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 05:52:11,403 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 05:52:11,404 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:11,404 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:11,404 INFO L858 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:11,404 INFO L861 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-01-11 05:52:11,404 INFO L854 garLoopResultBuilder]: At program point L316-2(lines 316 363) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L854 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L382-3(lines 382 388) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L382-5(lines 381 400) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L440-2(lines 440 457) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 395) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-11 05:52:11,405 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 332) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L414-6(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L100-3(lines 95 103) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse1 .cse2 .cse7) (and .cse0 .cse6 .cse2 .cse8 .cse7) (and .cse5 .cse6 .cse9 .cse2 .cse8 .cse10 .cse7 .cse11) (and .cse0 .cse9 .cse2 .cse8 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 477 487) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L140-3(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L406-7(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L274-2(lines 274 291) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 342) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L858 garLoopResultBuilder]: For program point L444-3(lines 444 452) no Hoare annotation was computed. [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L145-3(lines 136 149) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L414-7(lines 410 434) the Hoare annotation is: false [2022-01-11 05:52:11,406 INFO L854 garLoopResultBuilder]: At program point L493-1(lines 488 496) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L274-3(lines 266 294) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse8 .cse4) (and .cse0 .cse6 .cse2 .cse7 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3))) [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 469 476) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L414-4(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L542-9(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L440-3(lines 436 460) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L278-2(lines 278 288) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 378 401) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 346 359) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,407 INFO L854 garLoopResultBuilder]: At program point L406-5(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,407 INFO L858 garLoopResultBuilder]: For program point L542-11(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L279-3(lines 279 285) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: false [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L382(lines 382 388) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: false [2022-01-11 05:52:11,408 INFO L854 garLoopResultBuilder]: At program point L414-5(lines 410 434) the Hoare annotation is: false [2022-01-11 05:52:11,408 INFO L854 garLoopResultBuilder]: At program point L548-3(lines 533 551) the Hoare annotation is: false [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L300-1(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L861 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L382-2(lines 381 400) no Hoare annotation was computed. [2022-01-11 05:52:11,408 INFO L854 garLoopResultBuilder]: At program point L474(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 05:52:11,408 INFO L858 garLoopResultBuilder]: For program point L556-2(lines 556 562) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L542-6(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L418-9(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L854 garLoopResultBuilder]: At program point L301-1(lines 296 303) the Hoare annotation is: false [2022-01-11 05:52:11,409 INFO L861 garLoopResultBuilder]: At program point L369(lines 306 371) the Hoare annotation is: true [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 .cse2))) [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L854 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0Int 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 05:52:11,409 INFO L858 garLoopResultBuilder]: For program point L542-8(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,409 INFO L854 garLoopResultBuilder]: At program point L466-3(lines 461 468) the Hoare annotation is: false [2022-01-11 05:52:11,409 INFO L854 garLoopResultBuilder]: At program point L406-6(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,410 INFO L861 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L167-1(lines 167 171) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L414-2(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0Int 0)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse0 .cse6 .cse7 .cse2 .cse8))) [2022-01-11 05:52:11,410 INFO L854 garLoopResultBuilder]: At program point L548-2(lines 533 551) the Hoare annotation is: false [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L382-6(lines 382 388) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L854 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse1 (<= 1 ~methaneLevelCritical~0Int) .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L854 garLoopResultBuilder]: At program point L406-3(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L418-6(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L382-8(lines 381 400) no Hoare annotation was computed. [2022-01-11 05:52:11,410 INFO L858 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) .cse0 .cse1 .cse2))) [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L414-3(lines 410 434) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~systemActive~0Int 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L466-2(lines 461 468) the Hoare annotation is: false [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L406-4(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-11 05:52:11,411 INFO L858 garLoopResultBuilder]: For program point L440-4(lines 440 457) no Hoare annotation was computed. [2022-01-11 05:52:11,411 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 395) no Hoare annotation was computed. [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 469 476) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~4#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-11 05:52:11,411 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,411 INFO L858 garLoopResultBuilder]: For program point L542-3(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,411 INFO L854 garLoopResultBuilder]: At program point L440-1(lines 436 460) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1) (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L399(lines 378 401) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int)) (.cse5 (= ~systemActive~0Int 0)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1))) (.cse7 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse0 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse9 .cse10 .cse7 .cse11) (and .cse0 .cse8 .cse2 .cse9 .cse10 .cse7 .cse4 .cse11))) [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L100-4(lines 95 103) the Hoare annotation is: false [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L414-10(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L100-5(lines 95 103) the Hoare annotation is: false [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L406-1(lines 402 408) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L542-5(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 477 487) the Hoare annotation is: false [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L140-5(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L406-11(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,412 INFO L858 garLoopResultBuilder]: For program point L274-4(lines 274 291) no Hoare annotation was computed. [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: false [2022-01-11 05:52:11,412 INFO L854 garLoopResultBuilder]: At program point L414-1(lines 410 434) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L548-1(lines 533 551) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse2))) [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L444-6(lines 444 452) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L145-5(lines 136 149) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L414-11(lines 410 434) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L493-2(lines 488 496) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L274-5(lines 266 294) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L418-3(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 469 476) the Hoare annotation is: false [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L414-8(lines 414 431) no Hoare annotation was computed. [2022-01-11 05:52:11,413 INFO L858 garLoopResultBuilder]: For program point L542-15(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L440-5(lines 436 460) the Hoare annotation is: false [2022-01-11 05:52:11,414 INFO L858 garLoopResultBuilder]: For program point L278-4(lines 278 288) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L399-2(lines 378 401) the Hoare annotation is: false [2022-01-11 05:52:11,414 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L466-1(lines 461 468) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) .cse2) (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0) .cse2))) [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L406-2(lines 402 408) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-11 05:52:11,414 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 146) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L406-9(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,414 INFO L858 garLoopResultBuilder]: For program point L542-17(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L858 garLoopResultBuilder]: For program point L279-6(lines 279 285) no Hoare annotation was computed. [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: false [2022-01-11 05:52:11,414 INFO L854 garLoopResultBuilder]: At program point L145-4(lines 136 149) the Hoare annotation is: false [2022-01-11 05:52:11,415 INFO L854 garLoopResultBuilder]: At program point L414-9(lines 410 434) the Hoare annotation is: false [2022-01-11 05:52:11,415 INFO L854 garLoopResultBuilder]: At program point L548-5(lines 533 551) the Hoare annotation is: false [2022-01-11 05:52:11,415 INFO L858 garLoopResultBuilder]: For program point L300-2(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,415 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,437 INFO L858 garLoopResultBuilder]: For program point L542-12(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,437 INFO L858 garLoopResultBuilder]: For program point L418-15(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,437 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-01-11 05:52:11,437 INFO L854 garLoopResultBuilder]: At program point L301-2(lines 296 303) the Hoare annotation is: false [2022-01-11 05:52:11,437 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: false [2022-01-11 05:52:11,437 INFO L854 garLoopResultBuilder]: At program point L406(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,437 INFO L858 garLoopResultBuilder]: For program point L542-14(lines 542 546) no Hoare annotation was computed. [2022-01-11 05:52:11,438 INFO L854 garLoopResultBuilder]: At program point L466-5(lines 461 468) the Hoare annotation is: false [2022-01-11 05:52:11,438 INFO L854 garLoopResultBuilder]: At program point L406-10(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,438 INFO L854 garLoopResultBuilder]: At program point L548-4(lines 533 551) the Hoare annotation is: false [2022-01-11 05:52:11,438 INFO L858 garLoopResultBuilder]: For program point L418-12(lines 418 426) no Hoare annotation was computed. [2022-01-11 05:52:11,438 INFO L854 garLoopResultBuilder]: At program point L466-4(lines 461 468) the Hoare annotation is: false [2022-01-11 05:52:11,438 INFO L854 garLoopResultBuilder]: At program point L406-8(lines 402 408) the Hoare annotation is: false [2022-01-11 05:52:11,441 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:11,442 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 05:52:11,533 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:52:11 BasicIcfg [2022-01-11 05:52:11,533 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 05:52:11,533 INFO L158 Benchmark]: Toolchain (without parser) took 8854.15ms. Allocated memory was 204.5MB in the beginning and 474.0MB in the end (delta: 269.5MB). Free memory was 148.9MB in the beginning and 200.3MB in the end (delta: -51.4MB). Peak memory consumption was 251.4MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 204.5MB. Free memory was 166.7MB in the beginning and 166.7MB in the end (delta: 70.2kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: CACSL2BoogieTranslator took 415.29ms. Allocated memory was 204.5MB in the beginning and 325.1MB in the end (delta: 120.6MB). Free memory was 148.8MB in the beginning and 283.4MB in the end (delta: -134.6MB). Peak memory consumption was 8.9MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.15ms. Allocated memory is still 325.1MB. Free memory was 283.4MB in the beginning and 280.3MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: Boogie Preprocessor took 57.75ms. Allocated memory is still 325.1MB. Free memory was 280.3MB in the beginning and 277.6MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: RCFGBuilder took 600.97ms. Allocated memory is still 325.1MB. Free memory was 277.1MB in the beginning and 253.0MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,534 INFO L158 Benchmark]: IcfgTransformer took 105.36ms. Allocated memory is still 325.1MB. Free memory was 253.0MB in the beginning and 244.1MB in the end (delta: 8.9MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,535 INFO L158 Benchmark]: TraceAbstraction took 7622.89ms. Allocated memory was 325.1MB in the beginning and 474.0MB in the end (delta: 148.9MB). Free memory was 243.6MB in the beginning and 200.3MB in the end (delta: 43.3MB). Peak memory consumption was 225.7MB. Max. memory is 8.0GB. [2022-01-11 05:52:11,536 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 204.5MB. Free memory was 166.7MB in the beginning and 166.7MB in the end (delta: 70.2kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 415.29ms. Allocated memory was 204.5MB in the beginning and 325.1MB in the end (delta: 120.6MB). Free memory was 148.8MB in the beginning and 283.4MB in the end (delta: -134.6MB). Peak memory consumption was 8.9MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 47.15ms. Allocated memory is still 325.1MB. Free memory was 283.4MB in the beginning and 280.3MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 57.75ms. Allocated memory is still 325.1MB. Free memory was 280.3MB in the beginning and 277.6MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 600.97ms. Allocated memory is still 325.1MB. Free memory was 277.1MB in the beginning and 253.0MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 105.36ms. Allocated memory is still 325.1MB. Free memory was 253.0MB in the beginning and 244.1MB in the end (delta: 8.9MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 7622.89ms. Allocated memory was 325.1MB in the beginning and 474.0MB in the end (delta: 148.9MB). Free memory was 243.6MB in the beginning and 200.3MB in the end (delta: 43.3MB). Peak memory consumption was 225.7MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 167 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 7.5s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1811 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1811 mSDsluCounter, 4360 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2503 mSDsCounter, 86 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 266 IncrementalHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 86 mSolverCounterUnsat, 1857 mSDtfsCounter, 266 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 69 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=516occurred in iteration=4, InterpolantAutomatonStates: 61, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1634 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 82 LocationsWithAnnotation, 82 PreInvPairs, 165 NumberOfFragments, 1785 HoareAnnotationTreeSize, 82 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 82 FomulaSimplificationsInter, 232314 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 584 NumberOfCodeBlocks, 584 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 572 ConstructedInterpolants, 0 QuantifiedInterpolants, 1129 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 149/149 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning))) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive))) || ((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && 0bv32 == pumpRunning) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && systemActive == 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) RESULT: Ultimate proved your program to be correct! [2022-01-11 05:52:11,597 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...