./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 20ed64ec Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9558026aa74bc39759eb2664747acd02f73fafe3 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-20ed64e [2021-08-26 08:44:20,169 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-08-26 08:44:20,170 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-08-26 08:44:20,210 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-08-26 08:44:20,211 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-08-26 08:44:20,215 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-08-26 08:44:20,216 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-08-26 08:44:20,222 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-08-26 08:44:20,224 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-08-26 08:44:20,230 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-08-26 08:44:20,231 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-08-26 08:44:20,236 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-08-26 08:44:20,236 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-08-26 08:44:20,238 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-08-26 08:44:20,240 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-08-26 08:44:20,244 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-08-26 08:44:20,245 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-08-26 08:44:20,245 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-08-26 08:44:20,247 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-08-26 08:44:20,251 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-08-26 08:44:20,254 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-08-26 08:44:20,255 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-08-26 08:44:20,256 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-08-26 08:44:20,257 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-08-26 08:44:20,262 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-08-26 08:44:20,262 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-08-26 08:44:20,262 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-08-26 08:44:20,264 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-08-26 08:44:20,264 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-08-26 08:44:20,265 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-08-26 08:44:20,265 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-08-26 08:44:20,266 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-08-26 08:44:20,267 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-08-26 08:44:20,268 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-08-26 08:44:20,269 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-08-26 08:44:20,269 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-08-26 08:44:20,270 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-08-26 08:44:20,270 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-08-26 08:44:20,271 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-08-26 08:44:20,272 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-08-26 08:44:20,273 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-08-26 08:44:20,273 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-08-26 08:44:20,319 INFO L113 SettingsManager]: Loading preferences was successful [2021-08-26 08:44:20,319 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-08-26 08:44:20,320 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-08-26 08:44:20,320 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-08-26 08:44:20,321 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-08-26 08:44:20,322 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-08-26 08:44:20,322 INFO L138 SettingsManager]: * Use SBE=true [2021-08-26 08:44:20,322 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-08-26 08:44:20,322 INFO L138 SettingsManager]: * sizeof long=4 [2021-08-26 08:44:20,322 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-08-26 08:44:20,323 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-08-26 08:44:20,323 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * sizeof long double=12 [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-08-26 08:44:20,324 INFO L138 SettingsManager]: * Use constant arrays=true [2021-08-26 08:44:20,325 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-08-26 08:44:20,325 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-08-26 08:44:20,325 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-08-26 08:44:20,325 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-08-26 08:44:20,325 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-26 08:44:20,326 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-08-26 08:44:20,326 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-08-26 08:44:20,326 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-08-26 08:44:20,326 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-08-26 08:44:20,326 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-08-26 08:44:20,327 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-08-26 08:44:20,327 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-08-26 08:44:20,327 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9558026aa74bc39759eb2664747acd02f73fafe3 [2021-08-26 08:44:20,596 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-08-26 08:44:20,623 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-08-26 08:44:20,626 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-08-26 08:44:20,627 INFO L271 PluginConnector]: Initializing CDTParser... [2021-08-26 08:44:20,628 INFO L275 PluginConnector]: CDTParser initialized [2021-08-26 08:44:20,629 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-08-26 08:44:20,686 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0d36eb07/baa97e5183e84707971ab8b44cb2e51d/FLAGe752e44af [2021-08-26 08:44:21,205 INFO L306 CDTParser]: Found 1 translation units. [2021-08-26 08:44:21,205 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-08-26 08:44:21,217 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0d36eb07/baa97e5183e84707971ab8b44cb2e51d/FLAGe752e44af [2021-08-26 08:44:21,706 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0d36eb07/baa97e5183e84707971ab8b44cb2e51d [2021-08-26 08:44:21,710 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-08-26 08:44:21,711 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-08-26 08:44:21,712 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-08-26 08:44:21,712 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-08-26 08:44:21,716 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-08-26 08:44:21,716 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.08 08:44:21" (1/1) ... [2021-08-26 08:44:21,718 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18ed5503 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:21, skipping insertion in model container [2021-08-26 08:44:21,718 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.08 08:44:21" (1/1) ... [2021-08-26 08:44:21,724 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-08-26 08:44:21,754 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-08-26 08:44:21,902 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7057,7070] [2021-08-26 08:44:21,971 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-26 08:44:21,982 INFO L203 MainTranslator]: Completed pre-run [2021-08-26 08:44:22,010 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7057,7070] [2021-08-26 08:44:22,040 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-26 08:44:22,056 INFO L208 MainTranslator]: Completed translation [2021-08-26 08:44:22,056 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22 WrapperNode [2021-08-26 08:44:22,056 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-08-26 08:44:22,057 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-08-26 08:44:22,058 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-08-26 08:44:22,058 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-08-26 08:44:22,063 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,078 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,128 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-08-26 08:44:22,129 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-08-26 08:44:22,130 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-08-26 08:44:22,130 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-08-26 08:44:22,137 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,137 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,145 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,145 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,167 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,187 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,192 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,213 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-08-26 08:44:22,214 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-08-26 08:44:22,214 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-08-26 08:44:22,214 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-08-26 08:44:22,216 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (1/1) ... [2021-08-26 08:44:22,228 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-26 08:44:22,234 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-26 08:44:22,258 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-08-26 08:44:22,284 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-08-26 08:44:22,310 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-08-26 08:44:22,311 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-08-26 08:44:22,312 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-08-26 08:44:22,313 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-08-26 08:44:23,275 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-08-26 08:44:23,275 INFO L299 CfgBuilder]: Removed 354 assume(true) statements. [2021-08-26 08:44:23,278 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:44:23 BoogieIcfgContainer [2021-08-26 08:44:23,278 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-08-26 08:44:23,280 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-08-26 08:44:23,280 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-08-26 08:44:23,282 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-08-26 08:44:23,282 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.08 08:44:21" (1/3) ... [2021-08-26 08:44:23,283 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4fca4136 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.08 08:44:23, skipping insertion in model container [2021-08-26 08:44:23,283 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.08 08:44:22" (2/3) ... [2021-08-26 08:44:23,283 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4fca4136 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.08 08:44:23, skipping insertion in model container [2021-08-26 08:44:23,284 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:44:23" (3/3) ... [2021-08-26 08:44:23,285 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2021-08-26 08:44:23,294 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-08-26 08:44:23,294 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-08-26 08:44:23,330 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-08-26 08:44:23,335 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-08-26 08:44:23,336 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-08-26 08:44:23,358 INFO L276 IsEmpty]: Start isEmpty. Operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-08-26 08:44:23,364 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:23,364 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:23,365 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:23,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:23,370 INFO L82 PathProgramCache]: Analyzing trace with hash 1389216571, now seen corresponding path program 1 times [2021-08-26 08:44:23,379 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:23,380 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616001417] [2021-08-26 08:44:23,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:23,381 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:23,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:23,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:23,654 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:23,655 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616001417] [2021-08-26 08:44:23,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616001417] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:23,656 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:23,656 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-26 08:44:23,661 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565452169] [2021-08-26 08:44:23,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-08-26 08:44:23,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:23,689 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-08-26 08:44:23,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-26 08:44:23,692 INFO L87 Difference]: Start difference. First operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:23,751 INFO L93 Difference]: Finished difference Result 456 states and 683 transitions. [2021-08-26 08:44:23,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-08-26 08:44:23,752 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-08-26 08:44:23,753 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:23,766 INFO L225 Difference]: With dead ends: 456 [2021-08-26 08:44:23,767 INFO L226 Difference]: Without dead ends: 227 [2021-08-26 08:44:23,771 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-26 08:44:23,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-08-26 08:44:23,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2021-08-26 08:44:23,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 224 states have (on average 1.4866071428571428) internal successors, (333), 226 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 333 transitions. [2021-08-26 08:44:23,844 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 333 transitions. Word has length 18 [2021-08-26 08:44:23,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:23,846 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 333 transitions. [2021-08-26 08:44:23,846 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,846 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 333 transitions. [2021-08-26 08:44:23,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-08-26 08:44:23,847 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:23,848 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:23,848 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-08-26 08:44:23,848 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:23,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:23,851 INFO L82 PathProgramCache]: Analyzing trace with hash 478185818, now seen corresponding path program 1 times [2021-08-26 08:44:23,851 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:23,852 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421685250] [2021-08-26 08:44:23,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:23,852 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:23,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:23,937 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:23,938 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:23,938 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421685250] [2021-08-26 08:44:23,938 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421685250] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:23,938 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:23,938 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:44:23,939 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2063605576] [2021-08-26 08:44:23,941 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:44:23,941 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:23,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:44:23,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:44:23,943 INFO L87 Difference]: Start difference. First operand 227 states and 333 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:23,964 INFO L93 Difference]: Finished difference Result 227 states and 333 transitions. [2021-08-26 08:44:23,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:44:23,967 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-08-26 08:44:23,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:23,968 INFO L225 Difference]: With dead ends: 227 [2021-08-26 08:44:23,968 INFO L226 Difference]: Without dead ends: 85 [2021-08-26 08:44:23,969 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.0ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:44:23,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-08-26 08:44:23,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-08-26 08:44:23,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4761904761904763) internal successors, (124), 84 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 124 transitions. [2021-08-26 08:44:23,974 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 124 transitions. Word has length 19 [2021-08-26 08:44:23,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:23,974 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 124 transitions. [2021-08-26 08:44:23,974 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:23,975 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 124 transitions. [2021-08-26 08:44:23,975 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-08-26 08:44:23,975 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:23,975 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:23,976 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-08-26 08:44:23,976 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:23,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:23,976 INFO L82 PathProgramCache]: Analyzing trace with hash 1017898692, now seen corresponding path program 1 times [2021-08-26 08:44:23,976 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:23,977 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2095740217] [2021-08-26 08:44:23,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:23,977 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:23,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,070 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,070 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2095740217] [2021-08-26 08:44:24,071 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2095740217] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,071 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,073 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:24,074 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [171048649] [2021-08-26 08:44:24,074 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-26 08:44:24,075 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-26 08:44:24,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-08-26 08:44:24,076 INFO L87 Difference]: Start difference. First operand 85 states and 124 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:24,202 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2021-08-26 08:44:24,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:44:24,206 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-08-26 08:44:24,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:24,207 INFO L225 Difference]: With dead ends: 164 [2021-08-26 08:44:24,207 INFO L226 Difference]: Without dead ends: 85 [2021-08-26 08:44:24,209 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 49.6ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-26 08:44:24,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-08-26 08:44:24,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-08-26 08:44:24,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4642857142857142) internal successors, (123), 84 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 123 transitions. [2021-08-26 08:44:24,217 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 123 transitions. Word has length 24 [2021-08-26 08:44:24,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:24,217 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 123 transitions. [2021-08-26 08:44:24,218 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,218 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 123 transitions. [2021-08-26 08:44:24,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-08-26 08:44:24,222 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:24,222 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:24,223 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-08-26 08:44:24,223 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:24,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:24,224 INFO L82 PathProgramCache]: Analyzing trace with hash 1367117657, now seen corresponding path program 1 times [2021-08-26 08:44:24,225 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:24,225 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [862129497] [2021-08-26 08:44:24,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:24,225 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:24,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,309 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,309 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,309 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [862129497] [2021-08-26 08:44:24,313 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [862129497] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,313 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,313 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-26 08:44:24,313 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [266122709] [2021-08-26 08:44:24,314 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-26 08:44:24,314 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-26 08:44:24,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:44:24,315 INFO L87 Difference]: Start difference. First operand 85 states and 123 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:24,353 INFO L93 Difference]: Finished difference Result 172 states and 251 transitions. [2021-08-26 08:44:24,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-26 08:44:24,354 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-08-26 08:44:24,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:24,355 INFO L225 Difference]: With dead ends: 172 [2021-08-26 08:44:24,355 INFO L226 Difference]: Without dead ends: 93 [2021-08-26 08:44:24,357 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.1ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-26 08:44:24,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-08-26 08:44:24,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 91. [2021-08-26 08:44:24,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 90 states have (on average 1.4222222222222223) internal successors, (128), 90 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 128 transitions. [2021-08-26 08:44:24,366 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 128 transitions. Word has length 27 [2021-08-26 08:44:24,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:24,366 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 128 transitions. [2021-08-26 08:44:24,366 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,367 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 128 transitions. [2021-08-26 08:44:24,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-08-26 08:44:24,367 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:24,368 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:24,368 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-08-26 08:44:24,368 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:24,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:24,369 INFO L82 PathProgramCache]: Analyzing trace with hash 166613997, now seen corresponding path program 1 times [2021-08-26 08:44:24,369 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:24,370 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [926958937] [2021-08-26 08:44:24,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:24,370 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:24,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,477 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,477 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [926958937] [2021-08-26 08:44:24,477 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [926958937] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,477 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,477 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:44:24,478 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [537437187] [2021-08-26 08:44:24,478 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:24,478 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:24,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:24,479 INFO L87 Difference]: Start difference. First operand 91 states and 128 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:24,573 INFO L93 Difference]: Finished difference Result 444 states and 640 transitions. [2021-08-26 08:44:24,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-26 08:44:24,574 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-08-26 08:44:24,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:24,575 INFO L225 Difference]: With dead ends: 444 [2021-08-26 08:44:24,576 INFO L226 Difference]: Without dead ends: 359 [2021-08-26 08:44:24,576 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 26.5ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-26 08:44:24,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2021-08-26 08:44:24,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2021-08-26 08:44:24,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 138 states have (on average 1.391304347826087) internal successors, (192), 138 states have internal predecessors, (192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 192 transitions. [2021-08-26 08:44:24,589 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 192 transitions. Word has length 33 [2021-08-26 08:44:24,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:24,589 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 192 transitions. [2021-08-26 08:44:24,590 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,590 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 192 transitions. [2021-08-26 08:44:24,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-26 08:44:24,591 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:24,591 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:24,591 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-08-26 08:44:24,591 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:24,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:24,592 INFO L82 PathProgramCache]: Analyzing trace with hash 1323909935, now seen corresponding path program 1 times [2021-08-26 08:44:24,592 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:24,592 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51444024] [2021-08-26 08:44:24,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:24,592 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:24,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,636 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,636 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51444024] [2021-08-26 08:44:24,637 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51444024] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,637 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,637 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-26 08:44:24,637 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947126799] [2021-08-26 08:44:24,638 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-26 08:44:24,638 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-26 08:44:24,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:44:24,639 INFO L87 Difference]: Start difference. First operand 139 states and 192 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:24,722 INFO L93 Difference]: Finished difference Result 294 states and 413 transitions. [2021-08-26 08:44:24,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-26 08:44:24,722 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-26 08:44:24,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:24,724 INFO L225 Difference]: With dead ends: 294 [2021-08-26 08:44:24,724 INFO L226 Difference]: Without dead ends: 209 [2021-08-26 08:44:24,727 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.7ms TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:44:24,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2021-08-26 08:44:24,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 206. [2021-08-26 08:44:24,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3902439024390243) internal successors, (285), 205 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 285 transitions. [2021-08-26 08:44:24,747 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 285 transitions. Word has length 34 [2021-08-26 08:44:24,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:24,749 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 285 transitions. [2021-08-26 08:44:24,749 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,749 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 285 transitions. [2021-08-26 08:44:24,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-26 08:44:24,752 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:24,752 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:24,752 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-08-26 08:44:24,752 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:24,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:24,753 INFO L82 PathProgramCache]: Analyzing trace with hash 312792685, now seen corresponding path program 1 times [2021-08-26 08:44:24,753 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:24,757 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1799867083] [2021-08-26 08:44:24,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:24,757 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:24,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,811 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,812 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1799867083] [2021-08-26 08:44:24,812 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1799867083] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,812 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,812 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:44:24,812 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1146674823] [2021-08-26 08:44:24,813 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-26 08:44:24,813 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-26 08:44:24,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:44:24,814 INFO L87 Difference]: Start difference. First operand 206 states and 285 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:24,880 INFO L93 Difference]: Finished difference Result 575 states and 806 transitions. [2021-08-26 08:44:24,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:44:24,881 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-26 08:44:24,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:24,883 INFO L225 Difference]: With dead ends: 575 [2021-08-26 08:44:24,883 INFO L226 Difference]: Without dead ends: 422 [2021-08-26 08:44:24,884 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 9.2ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:24,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2021-08-26 08:44:24,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 206. [2021-08-26 08:44:24,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3756097560975609) internal successors, (282), 205 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 282 transitions. [2021-08-26 08:44:24,911 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 282 transitions. Word has length 34 [2021-08-26 08:44:24,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:24,912 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 282 transitions. [2021-08-26 08:44:24,912 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:24,912 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 282 transitions. [2021-08-26 08:44:24,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-26 08:44:24,914 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:24,914 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:24,914 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-08-26 08:44:24,914 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:24,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:24,915 INFO L82 PathProgramCache]: Analyzing trace with hash 570958123, now seen corresponding path program 1 times [2021-08-26 08:44:24,915 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:24,915 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519603396] [2021-08-26 08:44:24,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:24,916 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:24,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:24,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:24,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:24,978 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519603396] [2021-08-26 08:44:24,978 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [519603396] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:24,978 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:24,978 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:24,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914177695] [2021-08-26 08:44:24,979 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:24,979 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:24,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:24,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:24,982 INFO L87 Difference]: Start difference. First operand 206 states and 282 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:25,064 INFO L93 Difference]: Finished difference Result 618 states and 858 transitions. [2021-08-26 08:44:25,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:44:25,065 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-26 08:44:25,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:25,067 INFO L225 Difference]: With dead ends: 618 [2021-08-26 08:44:25,068 INFO L226 Difference]: Without dead ends: 418 [2021-08-26 08:44:25,068 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 20.2ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:44:25,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2021-08-26 08:44:25,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 218. [2021-08-26 08:44:25,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 217 states have (on average 1.3410138248847927) internal successors, (291), 217 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 291 transitions. [2021-08-26 08:44:25,086 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 291 transitions. Word has length 34 [2021-08-26 08:44:25,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:25,087 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 291 transitions. [2021-08-26 08:44:25,088 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,088 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 291 transitions. [2021-08-26 08:44:25,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-26 08:44:25,089 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:25,089 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:25,089 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-08-26 08:44:25,090 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:25,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:25,090 INFO L82 PathProgramCache]: Analyzing trace with hash -598753245, now seen corresponding path program 1 times [2021-08-26 08:44:25,090 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:25,091 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827233735] [2021-08-26 08:44:25,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:25,091 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:25,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:25,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:25,215 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:25,216 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827233735] [2021-08-26 08:44:25,216 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827233735] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:25,216 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:25,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:25,216 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391027836] [2021-08-26 08:44:25,217 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-26 08:44:25,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:25,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-26 08:44:25,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-26 08:44:25,218 INFO L87 Difference]: Start difference. First operand 218 states and 291 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:25,498 INFO L93 Difference]: Finished difference Result 1297 states and 1697 transitions. [2021-08-26 08:44:25,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-08-26 08:44:25,499 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-26 08:44:25,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:25,503 INFO L225 Difference]: With dead ends: 1297 [2021-08-26 08:44:25,503 INFO L226 Difference]: Without dead ends: 1085 [2021-08-26 08:44:25,504 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 92.4ms TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-08-26 08:44:25,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1085 states. [2021-08-26 08:44:25,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1085 to 416. [2021-08-26 08:44:25,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 416 states, 415 states have (on average 1.3156626506024096) internal successors, (546), 415 states have internal predecessors, (546), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 416 states to 416 states and 546 transitions. [2021-08-26 08:44:25,555 INFO L78 Accepts]: Start accepts. Automaton has 416 states and 546 transitions. Word has length 37 [2021-08-26 08:44:25,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:25,557 INFO L470 AbstractCegarLoop]: Abstraction has 416 states and 546 transitions. [2021-08-26 08:44:25,557 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,557 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 546 transitions. [2021-08-26 08:44:25,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-26 08:44:25,558 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:25,559 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:25,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-08-26 08:44:25,559 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:25,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:25,560 INFO L82 PathProgramCache]: Analyzing trace with hash 81305125, now seen corresponding path program 1 times [2021-08-26 08:44:25,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:25,561 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1316190981] [2021-08-26 08:44:25,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:25,561 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:25,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:25,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:25,617 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:25,617 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1316190981] [2021-08-26 08:44:25,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1316190981] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:25,617 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:25,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:25,617 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999502457] [2021-08-26 08:44:25,618 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:25,618 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:25,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:25,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:25,619 INFO L87 Difference]: Start difference. First operand 416 states and 546 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:25,799 INFO L93 Difference]: Finished difference Result 1036 states and 1397 transitions. [2021-08-26 08:44:25,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-26 08:44:25,800 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-26 08:44:25,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:25,803 INFO L225 Difference]: With dead ends: 1036 [2021-08-26 08:44:25,803 INFO L226 Difference]: Without dead ends: 626 [2021-08-26 08:44:25,804 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 27.1ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-26 08:44:25,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2021-08-26 08:44:25,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 320. [2021-08-26 08:44:25,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 319 states have (on average 1.2884012539184952) internal successors, (411), 319 states have internal predecessors, (411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 411 transitions. [2021-08-26 08:44:25,829 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 411 transitions. Word has length 37 [2021-08-26 08:44:25,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:25,829 INFO L470 AbstractCegarLoop]: Abstraction has 320 states and 411 transitions. [2021-08-26 08:44:25,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:25,830 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 411 transitions. [2021-08-26 08:44:25,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-08-26 08:44:25,830 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:25,831 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:25,831 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-08-26 08:44:25,831 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:25,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:25,832 INFO L82 PathProgramCache]: Analyzing trace with hash 1988742173, now seen corresponding path program 1 times [2021-08-26 08:44:25,832 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:25,832 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1773237031] [2021-08-26 08:44:25,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:25,832 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:25,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:25,875 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:25,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:25,876 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1773237031] [2021-08-26 08:44:25,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1773237031] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:25,876 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:25,876 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:25,876 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551505576] [2021-08-26 08:44:25,877 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:25,877 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:25,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:25,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:25,878 INFO L87 Difference]: Start difference. First operand 320 states and 411 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,046 INFO L93 Difference]: Finished difference Result 786 states and 1003 transitions. [2021-08-26 08:44:26,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-26 08:44:26,046 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2021-08-26 08:44:26,047 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,048 INFO L225 Difference]: With dead ends: 786 [2021-08-26 08:44:26,049 INFO L226 Difference]: Without dead ends: 472 [2021-08-26 08:44:26,049 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 29.9ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-26 08:44:26,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2021-08-26 08:44:26,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 300. [2021-08-26 08:44:26,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2508361204013378) internal successors, (374), 299 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 374 transitions. [2021-08-26 08:44:26,073 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 374 transitions. Word has length 38 [2021-08-26 08:44:26,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,073 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 374 transitions. [2021-08-26 08:44:26,073 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,074 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 374 transitions. [2021-08-26 08:44:26,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-08-26 08:44:26,074 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,075 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,075 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-08-26 08:44:26,075 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,076 INFO L82 PathProgramCache]: Analyzing trace with hash 756271311, now seen corresponding path program 1 times [2021-08-26 08:44:26,076 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,076 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1724987853] [2021-08-26 08:44:26,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,076 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:26,118 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-26 08:44:26,118 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:26,118 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1724987853] [2021-08-26 08:44:26,118 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1724987853] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:26,119 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:26,119 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:26,119 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819829727] [2021-08-26 08:44:26,119 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:26,119 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:26,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:26,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:26,120 INFO L87 Difference]: Start difference. First operand 300 states and 374 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,190 INFO L93 Difference]: Finished difference Result 695 states and 869 transitions. [2021-08-26 08:44:26,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-26 08:44:26,190 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-08-26 08:44:26,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,192 INFO L225 Difference]: With dead ends: 695 [2021-08-26 08:44:26,192 INFO L226 Difference]: Without dead ends: 401 [2021-08-26 08:44:26,193 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 21.4ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:44:26,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 401 states. [2021-08-26 08:44:26,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 401 to 300. [2021-08-26 08:44:26,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2374581939799332) internal successors, (370), 299 states have internal predecessors, (370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 370 transitions. [2021-08-26 08:44:26,216 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 370 transitions. Word has length 54 [2021-08-26 08:44:26,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,217 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 370 transitions. [2021-08-26 08:44:26,217 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,217 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 370 transitions. [2021-08-26 08:44:26,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-08-26 08:44:26,218 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,218 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,218 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-08-26 08:44:26,219 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,219 INFO L82 PathProgramCache]: Analyzing trace with hash 683884753, now seen corresponding path program 1 times [2021-08-26 08:44:26,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,220 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827148732] [2021-08-26 08:44:26,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,220 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:26,254 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-26 08:44:26,255 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:26,255 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1827148732] [2021-08-26 08:44:26,255 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1827148732] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:26,255 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:26,255 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:44:26,256 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356328996] [2021-08-26 08:44:26,256 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-26 08:44:26,256 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:26,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-26 08:44:26,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-26 08:44:26,257 INFO L87 Difference]: Start difference. First operand 300 states and 370 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,297 INFO L93 Difference]: Finished difference Result 642 states and 801 transitions. [2021-08-26 08:44:26,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-26 08:44:26,297 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-08-26 08:44:26,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,299 INFO L225 Difference]: With dead ends: 642 [2021-08-26 08:44:26,299 INFO L226 Difference]: Without dead ends: 348 [2021-08-26 08:44:26,300 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 8.8ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:26,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2021-08-26 08:44:26,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 258. [2021-08-26 08:44:26,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2412451361867705) internal successors, (319), 257 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 319 transitions. [2021-08-26 08:44:26,320 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 319 transitions. Word has length 54 [2021-08-26 08:44:26,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,320 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 319 transitions. [2021-08-26 08:44:26,321 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,321 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 319 transitions. [2021-08-26 08:44:26,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-08-26 08:44:26,321 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,322 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,322 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-08-26 08:44:26,322 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,323 INFO L82 PathProgramCache]: Analyzing trace with hash -110145967, now seen corresponding path program 1 times [2021-08-26 08:44:26,323 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,323 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670487083] [2021-08-26 08:44:26,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,323 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:26,363 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-26 08:44:26,363 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:26,364 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670487083] [2021-08-26 08:44:26,364 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670487083] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:26,364 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:26,364 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-26 08:44:26,364 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248690279] [2021-08-26 08:44:26,365 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:26,365 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:26,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:26,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:26,366 INFO L87 Difference]: Start difference. First operand 258 states and 319 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,473 INFO L93 Difference]: Finished difference Result 666 states and 822 transitions. [2021-08-26 08:44:26,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-26 08:44:26,474 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-08-26 08:44:26,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,475 INFO L225 Difference]: With dead ends: 666 [2021-08-26 08:44:26,475 INFO L226 Difference]: Without dead ends: 414 [2021-08-26 08:44:26,476 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 24.6ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-26 08:44:26,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2021-08-26 08:44:26,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 258. [2021-08-26 08:44:26,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2256809338521402) internal successors, (315), 257 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 315 transitions. [2021-08-26 08:44:26,501 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 315 transitions. Word has length 55 [2021-08-26 08:44:26,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,502 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 315 transitions. [2021-08-26 08:44:26,502 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,502 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 315 transitions. [2021-08-26 08:44:26,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-08-26 08:44:26,503 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,503 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,503 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-08-26 08:44:26,504 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,504 INFO L82 PathProgramCache]: Analyzing trace with hash -1677058370, now seen corresponding path program 1 times [2021-08-26 08:44:26,504 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,504 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [623107153] [2021-08-26 08:44:26,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,505 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:26,563 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-08-26 08:44:26,563 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:26,563 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [623107153] [2021-08-26 08:44:26,563 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [623107153] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:26,564 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:26,564 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:26,564 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1591490647] [2021-08-26 08:44:26,564 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-26 08:44:26,564 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:26,565 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-26 08:44:26,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-26 08:44:26,565 INFO L87 Difference]: Start difference. First operand 258 states and 315 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,735 INFO L93 Difference]: Finished difference Result 833 states and 1030 transitions. [2021-08-26 08:44:26,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-08-26 08:44:26,736 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-08-26 08:44:26,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,738 INFO L225 Difference]: With dead ends: 833 [2021-08-26 08:44:26,738 INFO L226 Difference]: Without dead ends: 633 [2021-08-26 08:44:26,739 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 54.3ms TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2021-08-26 08:44:26,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2021-08-26 08:44:26,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 258. [2021-08-26 08:44:26,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2217898832684826) internal successors, (314), 257 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 314 transitions. [2021-08-26 08:44:26,761 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 314 transitions. Word has length 57 [2021-08-26 08:44:26,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,761 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 314 transitions. [2021-08-26 08:44:26,761 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,761 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 314 transitions. [2021-08-26 08:44:26,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-08-26 08:44:26,762 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,762 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,762 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-08-26 08:44:26,763 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,763 INFO L82 PathProgramCache]: Analyzing trace with hash 902631818, now seen corresponding path program 1 times [2021-08-26 08:44:26,763 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,764 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475656239] [2021-08-26 08:44:26,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,764 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:26,818 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-08-26 08:44:26,819 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:26,819 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [475656239] [2021-08-26 08:44:26,821 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [475656239] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-26 08:44:26,821 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-26 08:44:26,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-26 08:44:26,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [399988580] [2021-08-26 08:44:26,821 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-26 08:44:26,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:26,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-26 08:44:26,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-26 08:44:26,822 INFO L87 Difference]: Start difference. First operand 258 states and 314 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:26,897 INFO L93 Difference]: Finished difference Result 782 states and 970 transitions. [2021-08-26 08:44:26,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-08-26 08:44:26,898 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-08-26 08:44:26,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:26,900 INFO L225 Difference]: With dead ends: 782 [2021-08-26 08:44:26,900 INFO L226 Difference]: Without dead ends: 582 [2021-08-26 08:44:26,901 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 20.0ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:44:26,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2021-08-26 08:44:26,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 264. [2021-08-26 08:44:26,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 263 states have (on average 1.2167300380228137) internal successors, (320), 263 states have internal predecessors, (320), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 320 transitions. [2021-08-26 08:44:26,924 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 320 transitions. Word has length 63 [2021-08-26 08:44:26,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:26,924 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 320 transitions. [2021-08-26 08:44:26,925 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:26,925 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 320 transitions. [2021-08-26 08:44:26,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-08-26 08:44:26,925 INFO L504 BasicCegarLoop]: Found error trace [2021-08-26 08:44:26,926 INFO L512 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-26 08:44:26,926 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-08-26 08:44:26,926 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-26 08:44:26,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-26 08:44:26,927 INFO L82 PathProgramCache]: Analyzing trace with hash 1160797256, now seen corresponding path program 1 times [2021-08-26 08:44:26,927 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-26 08:44:26,927 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [943967347] [2021-08-26 08:44:26,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:26,927 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-26 08:44:26,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:27,001 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-08-26 08:44:27,001 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-26 08:44:27,001 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [943967347] [2021-08-26 08:44:27,002 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [943967347] provided 0 perfect and 1 imperfect interpolant sequences [2021-08-26 08:44:27,002 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [402721211] [2021-08-26 08:44:27,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-26 08:44:27,002 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-08-26 08:44:27,002 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-26 08:44:27,008 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-08-26 08:44:27,014 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-08-26 08:44:27,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-26 08:44:27,171 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 7 conjunts are in the unsatisfiable core [2021-08-26 08:44:27,178 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-08-26 08:44:27,453 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-08-26 08:44:27,453 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [402721211] provided 0 perfect and 1 imperfect interpolant sequences [2021-08-26 08:44:27,453 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-08-26 08:44:27,453 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2021-08-26 08:44:27,454 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1168137732] [2021-08-26 08:44:27,454 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-08-26 08:44:27,454 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-26 08:44:27,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-08-26 08:44:27,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2021-08-26 08:44:27,455 INFO L87 Difference]: Start difference. First operand 264 states and 320 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:27,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-26 08:44:27,658 INFO L93 Difference]: Finished difference Result 923 states and 1140 transitions. [2021-08-26 08:44:27,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-08-26 08:44:27,658 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-08-26 08:44:27,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-26 08:44:27,659 INFO L225 Difference]: With dead ends: 923 [2021-08-26 08:44:27,659 INFO L226 Difference]: Without dead ends: 0 [2021-08-26 08:44:27,663 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 58.7ms TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2021-08-26 08:44:27,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-08-26 08:44:27,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-08-26 08:44:27,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:27,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-08-26 08:44:27,663 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 63 [2021-08-26 08:44:27,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-26 08:44:27,664 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-08-26 08:44:27,664 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-26 08:44:27,664 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-08-26 08:44:27,664 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-08-26 08:44:27,666 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:44:27,667 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:44:27,667 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-08-26 08:44:27,690 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-08-26 08:44:27,883 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2021-08-26 08:44:27,885 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-08-26 08:44:27,889 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,899 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,899 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,900 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,970 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,971 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,971 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,972 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,972 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,973 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,973 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:27,974 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,313 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,314 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,366 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,366 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,395 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,396 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,396 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,397 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,397 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,398 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,398 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,398 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,553 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,554 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,596 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,596 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,598 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,598 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,599 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,599 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,600 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,600 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,602 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:28,602 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,024 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,025 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,025 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,026 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,026 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,026 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,028 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,028 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,050 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,050 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,051 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,051 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,052 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,052 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,053 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,053 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,891 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,892 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,893 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,893 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,893 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:29,894 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,426 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,428 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,428 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,450 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,451 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,451 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,452 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,452 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,453 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,686 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,687 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,709 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,710 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,710 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,810 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,810 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,811 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,811 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,812 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,812 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,812 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,813 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,813 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,814 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:30,941 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-26 08:44:40,925 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,926 INFO L853 garLoopResultBuilder]: At program point L102(lines 55 103) the Hoare annotation is: false [2021-08-26 08:44:40,928 INFO L857 garLoopResultBuilder]: For program point L368(lines 368 372) no Hoare annotation was computed. [2021-08-26 08:44:40,929 INFO L857 garLoopResultBuilder]: For program point L368-3(lines 368 372) no Hoare annotation was computed. [2021-08-26 08:44:40,929 INFO L857 garLoopResultBuilder]: For program point L368-6(lines 368 372) no Hoare annotation was computed. [2021-08-26 08:44:40,929 INFO L860 garLoopResultBuilder]: At program point L568(lines 549 571) the Hoare annotation is: true [2021-08-26 08:44:40,929 INFO L853 garLoopResultBuilder]: At program point L437(lines 432 440) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse5 (<= ~waterLevel~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse6 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse8 .cse9 .cse10 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse11 .cse12) (and .cse0 .cse1 (= ~pumpRunning~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse10) (and .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) .cse2 .cse3 .cse4 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) .cse6 .cse7 (<= ~waterLevel~0 2) .cse8 .cse9 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) .cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse11 .cse12))) [2021-08-26 08:44:40,930 INFO L853 garLoopResultBuilder]: At program point L437-1(lines 432 440) the Hoare annotation is: false [2021-08-26 08:44:40,930 INFO L853 garLoopResultBuilder]: At program point L437-2(lines 432 440) the Hoare annotation is: false [2021-08-26 08:44:40,931 INFO L853 garLoopResultBuilder]: At program point L637(lines 632 640) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-26 08:44:40,931 INFO L857 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,931 INFO L857 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,932 INFO L857 garLoopResultBuilder]: For program point L445-2(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,932 INFO L857 garLoopResultBuilder]: For program point L445-3(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,932 INFO L857 garLoopResultBuilder]: For program point L445-4(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,932 INFO L857 garLoopResultBuilder]: For program point L445-5(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-6(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-7(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-8(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-9(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-10(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L445-11(lines 445 451) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L380(lines 380 384) no Hoare annotation was computed. [2021-08-26 08:44:40,933 INFO L857 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-2(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-4(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-6(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-8(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-10(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-12(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-14(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-16(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-18(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-20(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L248-22(lines 248 254) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L582(lines 582 602) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L582-2(lines 582 602) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L853 garLoopResultBuilder]: At program point L450(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,934 INFO L857 garLoopResultBuilder]: For program point L582-4(lines 582 602) no Hoare annotation was computed. [2021-08-26 08:44:40,934 INFO L853 garLoopResultBuilder]: At program point L450-1(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,934 INFO L853 garLoopResultBuilder]: At program point L450-2(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-3(lines 441 454) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse9 .cse10 .cse5 .cse6 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse11 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse9 .cse10 .cse5 .cse6))) [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-4(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-5(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-6(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-7(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-8(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186-1(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-9(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186-2(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-10(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186-3(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L853 garLoopResultBuilder]: At program point L450-11(lines 441 454) the Hoare annotation is: false [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186-4(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L186-5(lines 186 203) no Hoare annotation was computed. [2021-08-26 08:44:40,935 INFO L857 garLoopResultBuilder]: For program point L57(lines 56 101) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190-1(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190-2(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190-3(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L58(lines 58 62) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190-4(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L190-5(lines 190 198) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L588(lines 588 601) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L853 garLoopResultBuilder]: At program point L588-1(lines 1 1006) the Hoare annotation is: (let ((.cse9 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse18 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse7 (= ~methaneLevelCritical~0 1)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse20 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse21 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse22 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse23 (<= 2 ~waterLevel~0)) (.cse24 (<= ~waterLevel~0 2)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse25 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse15 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse26 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse19 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse22 .cse23 .cse4 .cse5 .cse6 .cse7 .cse24 .cse13 .cse14 .cse25 .cse26 .cse8 .cse19) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse22 .cse4 .cse5 .cse6 .cse7 .cse24 .cse25 .cse26 .cse8) (and .cse9 .cse0 .cse1 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse15 .cse18) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse6 .cse12 .cse7 .cse13 .cse14 .cse16 .cse8 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse10 .cse11 .cse22 .cse23 .cse5 .cse6 .cse24 .cse13 .cse14 .cse25 .cse15 .cse26 .cse17 .cse19) (and .cse0 .cse1 .cse2 .cse11 .cse5 .cse6 (= ~waterLevel~0 1)))) [2021-08-26 08:44:40,936 INFO L857 garLoopResultBuilder]: For program point L588-2(lines 588 601) no Hoare annotation was computed. [2021-08-26 08:44:40,936 INFO L853 garLoopResultBuilder]: At program point L588-3(lines 1 1006) the Hoare annotation is: false [2021-08-26 08:44:40,937 INFO L857 garLoopResultBuilder]: For program point L588-4(lines 588 601) no Hoare annotation was computed. [2021-08-26 08:44:40,937 INFO L853 garLoopResultBuilder]: At program point L588-5(lines 1 1006) the Hoare annotation is: false [2021-08-26 08:44:40,937 INFO L857 garLoopResultBuilder]: For program point L392(lines 392 396) no Hoare annotation was computed. [2021-08-26 08:44:40,937 INFO L853 garLoopResultBuilder]: At program point L128(lines 127 146) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse6 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse7 .cse4 .cse5 .cse8 .cse9 .cse10) (and .cse0 .cse2 .cse7 .cse4 .cse5 .cse11 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse11 .cse6))) [2021-08-26 08:44:40,937 INFO L857 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2021-08-26 08:44:40,937 INFO L853 garLoopResultBuilder]: At program point L128-2(lines 127 146) the Hoare annotation is: false [2021-08-26 08:44:40,937 INFO L853 garLoopResultBuilder]: At program point L128-3(lines 127 146) the Hoare annotation is: false [2021-08-26 08:44:40,937 INFO L857 garLoopResultBuilder]: For program point L592(lines 592 598) no Hoare annotation was computed. [2021-08-26 08:44:40,937 INFO L857 garLoopResultBuilder]: For program point L592-2(lines 592 598) no Hoare annotation was computed. [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460(lines 455 463) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-08-26 08:44:40,938 INFO L857 garLoopResultBuilder]: For program point L592-4(lines 592 598) no Hoare annotation was computed. [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460-1(lines 455 463) the Hoare annotation is: false [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460-2(lines 455 463) the Hoare annotation is: false [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460-3(lines 455 463) the Hoare annotation is: false [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460-4(lines 455 463) the Hoare annotation is: false [2021-08-26 08:44:40,938 INFO L853 garLoopResultBuilder]: At program point L460-5(lines 455 463) the Hoare annotation is: false [2021-08-26 08:44:40,939 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-08-26 08:44:40,939 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L66(lines 66 72) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L853 garLoopResultBuilder]: At program point L66-1(lines 66 72) the Hoare annotation is: (let ((.cse19 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse8 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse10 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse11 (= 1 ~systemActive~0)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse23 (= ~waterLevel~0 1)) (.cse17 (= ~pumpRunning~0 1))) (let ((.cse5 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse3 (or (and .cse7 .cse8 .cse19 .cse10 .cse11 .cse13 .cse14 .cse17) (and .cse7 .cse8 .cse10 .cse11 .cse13 .cse14 .cse23 .cse17))) (.cse6 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse16 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse9 (<= ~waterLevel~0 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse20 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse21 (= ~methaneLevelCritical~0 1)) (.cse2 (<= ~waterLevel~0 2)) (.cse22 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse18 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse4 .cse15 .cse5 .cse16 .cse17) (and .cse7 .cse18 .cse8 .cse1 .cse19 .cse10 .cse11 .cse2) (and .cse20 .cse21 .cse2 .cse3 .cse22) (and .cse6 .cse7 .cse18 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse4 .cse16) (and .cse7 .cse8 .cse9 .cse20 .cse10 .cse11 .cse12 .cse21 .cse13 .cse14 .cse15 .cse22 .cse17) (and .cse7 .cse18 .cse8 .cse20 .cse10 .cse11 .cse21 .cse2 .cse22) (and .cse7 .cse18 .cse8 .cse1 .cse10 .cse11 .cse23)))) [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-2(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-3(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-5(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-6(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-8(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-9(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-11(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-12(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,940 INFO L857 garLoopResultBuilder]: For program point L331-14(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-15(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-17(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-18(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-20(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-21(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-23(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-24(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-26(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-27(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-29(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,941 INFO L857 garLoopResultBuilder]: For program point L331-30(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,946 INFO L857 garLoopResultBuilder]: For program point L331-32(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,946 INFO L857 garLoopResultBuilder]: For program point L331-33(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,947 INFO L857 garLoopResultBuilder]: For program point L331-35(lines 331 335) no Hoare annotation was computed. [2021-08-26 08:44:40,947 INFO L853 garLoopResultBuilder]: At program point L135(lines 135 141) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse12 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse13 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse14 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse15 (<= 2 ~waterLevel~0)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse17 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse18 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse11 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 .cse13 .cse1 .cse14 .cse15 .cse3 .cse4 .cse6 .cse16 .cse7 .cse8 .cse17 .cse18 .cse10 .cse11) (and .cse0 .cse19 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse11) (and .cse0 .cse19 .cse1 .cse21 .cse2 .cse3 .cse4) (and .cse0 .cse19 .cse12 .cse13 .cse1 .cse14 .cse3 .cse4 .cse6 .cse16 .cse17 .cse18 .cse10) (and .cse0 .cse12 .cse13 .cse1 .cse20 .cse21 .cse14 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse15 .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse16 .cse7 .cse8 .cse17 .cse18 .cse11))) [2021-08-26 08:44:40,947 INFO L853 garLoopResultBuilder]: At program point L135-1(lines 135 141) the Hoare annotation is: false [2021-08-26 08:44:40,947 INFO L853 garLoopResultBuilder]: At program point L135-2(lines 135 141) the Hoare annotation is: false [2021-08-26 08:44:40,947 INFO L853 garLoopResultBuilder]: At program point L533(lines 529 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-26 08:44:40,947 INFO L857 garLoopResultBuilder]: For program point L469(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,948 INFO L857 garLoopResultBuilder]: For program point L469-1(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,948 INFO L857 garLoopResultBuilder]: For program point L469-2(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,948 INFO L853 garLoopResultBuilder]: At program point L337(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,948 INFO L853 garLoopResultBuilder]: At program point L337-1(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,948 INFO L853 garLoopResultBuilder]: At program point L337-2(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,948 INFO L853 garLoopResultBuilder]: At program point L337-3(lines 322 340) the Hoare annotation is: (let ((.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse12 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse14 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse15 (<= ~waterLevel~0 1)) (.cse16 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse17 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse8 .cse12 .cse9 .cse10 .cse11) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse15 .cse16 .cse17 .cse7 .cse8 .cse12) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse5 .cse15 .cse16 .cse17 .cse7 .cse8))) [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-4(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-5(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-6(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-7(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-8(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-9(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,949 INFO L853 garLoopResultBuilder]: At program point L337-10(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,950 INFO L853 garLoopResultBuilder]: At program point L337-11(lines 322 340) the Hoare annotation is: false [2021-08-26 08:44:40,950 INFO L853 garLoopResultBuilder]: At program point L405(lines 400 408) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7))) [2021-08-26 08:44:40,950 INFO L853 garLoopResultBuilder]: At program point L405-1(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,950 INFO L853 garLoopResultBuilder]: At program point L405-2(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,950 INFO L853 garLoopResultBuilder]: At program point L405-3(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L273(lines 266 276) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7))) [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L405-4(lines 400 408) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L273-1(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L405-5(lines 400 408) the Hoare annotation is: (let ((.cse8 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse11 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse16 (<= 2 ~waterLevel~0)) (.cse9 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse10 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse22 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse14 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse15 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse17 (<= ~waterLevel~0 2)) (.cse18 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse19 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8 .cse6 .cse9 .cse10 .cse11 .cse7 .cse12) (and .cse0 .cse13 .cse14 .cse2 .cse15 .cse16 .cse4 .cse5 .cse6 .cse17 .cse9 .cse10 .cse18 .cse19 .cse7 .cse12) (and .cse0 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11 .cse22 .cse12) (and .cse0 .cse1 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5) (and .cse0 .cse13 .cse14 .cse2 .cse20 .cse21 .cse15 .cse16 .cse4 .cse5 .cse17 .cse9 .cse10 .cse18 .cse19 .cse22 .cse12) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse15 .cse4 .cse5 .cse6 .cse17 .cse18 .cse19 .cse7))) [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L273-2(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,951 INFO L853 garLoopResultBuilder]: At program point L405-6(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L273-3(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L405-7(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L273-4(lines 266 276) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)))) [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L405-8(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L273-5(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L405-9(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,952 INFO L853 garLoopResultBuilder]: At program point L273-6(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L405-10(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L273-7(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L405-11(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L273-8(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L405-12(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L273-9(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L405-13(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,953 INFO L853 garLoopResultBuilder]: At program point L273-10(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,954 INFO L853 garLoopResultBuilder]: At program point L405-14(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,954 INFO L853 garLoopResultBuilder]: At program point L273-11(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,954 INFO L853 garLoopResultBuilder]: At program point L405-15(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,954 INFO L853 garLoopResultBuilder]: At program point L273-12(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,954 INFO L853 garLoopResultBuilder]: At program point L405-16(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,955 INFO L853 garLoopResultBuilder]: At program point L273-13(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,955 INFO L853 garLoopResultBuilder]: At program point L405-17(lines 400 408) the Hoare annotation is: false [2021-08-26 08:44:40,955 INFO L853 garLoopResultBuilder]: At program point L273-14(lines 266 276) the Hoare annotation is: false [2021-08-26 08:44:40,955 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-26 08:44:40,955 INFO L857 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2021-08-26 08:44:40,956 INFO L853 garLoopResultBuilder]: At program point L76-1(lines 76 82) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse6 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse11 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 1)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (<= 2 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse14 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse2 .cse4 .cse5 .cse12) (and (or (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10)) .cse12) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse15 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse4 .cse5 .cse15 .cse12) (and .cse15 .cse12 (or (and .cse0 .cse1 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10))))) [2021-08-26 08:44:40,956 INFO L857 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2021-08-26 08:44:40,956 INFO L857 garLoopResultBuilder]: For program point L212-1(lines 212 229) no Hoare annotation was computed. [2021-08-26 08:44:40,956 INFO L857 garLoopResultBuilder]: For program point L212-2(lines 212 229) no Hoare annotation was computed. [2021-08-26 08:44:40,956 INFO L853 garLoopResultBuilder]: At program point L282(lines 277 285) the Hoare annotation is: (and (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (<= ~waterLevel~0 2) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) (<= ULTIMATE.start_activatePump_~tmp~4 0) (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) (= |ULTIMATE.start_isMethaneAlarm_#res| 0) (= |ULTIMATE.start_isPumpRunning_#res| 1) (= ~pumpRunning~0 1)) [2021-08-26 08:44:40,956 INFO L853 garLoopResultBuilder]: At program point L282-1(lines 277 285) the Hoare annotation is: false [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L853 garLoopResultBuilder]: At program point L282-2(lines 277 285) the Hoare annotation is: false [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L216-1(lines 216 224) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L216-2(lines 216 224) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L350(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L350-2(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,957 INFO L857 garLoopResultBuilder]: For program point L350-3(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-5(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-6(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L86(lines 86 97) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-8(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-9(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-11(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-12(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,958 INFO L857 garLoopResultBuilder]: For program point L350-14(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,959 INFO L857 garLoopResultBuilder]: For program point L350-15(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,959 INFO L857 garLoopResultBuilder]: For program point L350-17(lines 350 354) no Hoare annotation was computed. [2021-08-26 08:44:40,959 INFO L853 garLoopResultBuilder]: At program point L485-2(lines 485 499) the Hoare annotation is: false [2021-08-26 08:44:40,959 INFO L857 garLoopResultBuilder]: For program point L486(line 486) no Hoare annotation was computed. [2021-08-26 08:44:40,959 INFO L853 garLoopResultBuilder]: At program point L356(lines 341 359) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-08-26 08:44:40,959 INFO L853 garLoopResultBuilder]: At program point L356-1(lines 341 359) the Hoare annotation is: false [2021-08-26 08:44:40,959 INFO L853 garLoopResultBuilder]: At program point L356-2(lines 341 359) the Hoare annotation is: false [2021-08-26 08:44:40,960 INFO L853 garLoopResultBuilder]: At program point L356-3(lines 341 359) the Hoare annotation is: false [2021-08-26 08:44:40,960 INFO L853 garLoopResultBuilder]: At program point L356-4(lines 341 359) the Hoare annotation is: false [2021-08-26 08:44:40,961 INFO L853 garLoopResultBuilder]: At program point L356-5(lines 341 359) the Hoare annotation is: false [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L92(lines 92 96) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L92-2(lines 128 134) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L489(lines 489 493) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L489-1(lines 128 134) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L160(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L160-1(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,961 INFO L857 garLoopResultBuilder]: For program point L160-2(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-3(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-4(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-5(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-6(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-7(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-8(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,962 INFO L857 garLoopResultBuilder]: For program point L160-9(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L160-10(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L160-11(lines 160 177) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L559(lines 559 566) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L860 garLoopResultBuilder]: At program point L559-1(lines 559 566) the Hoare annotation is: true [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L164(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L164-1(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L164-2(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,963 INFO L857 garLoopResultBuilder]: For program point L164-3(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-4(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-5(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-6(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-7(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-8(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-9(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-10(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,964 INFO L857 garLoopResultBuilder]: For program point L164-11(lines 164 172) no Hoare annotation was computed. [2021-08-26 08:44:40,965 INFO L853 garLoopResultBuilder]: At program point L629(lines 1 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-26 08:44:40,970 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-08-26 08:44:41,021 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.08 08:44:41 BoogieIcfgContainer [2021-08-26 08:44:41,023 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-08-26 08:44:41,024 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-08-26 08:44:41,024 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-08-26 08:44:41,024 INFO L275 PluginConnector]: Witness Printer initialized [2021-08-26 08:44:41,025 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.08 08:44:23" (3/4) ... [2021-08-26 08:44:41,027 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-08-26 08:44:41,055 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-08-26 08:44:41,056 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-08-26 08:44:41,058 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-08-26 08:44:41,059 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-08-26 08:44:41,060 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-08-26 08:44:41,062 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-26 08:44:41,063 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-26 08:44:41,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 [2021-08-26 08:44:41,092 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 [2021-08-26 08:44:41,092 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-08-26 08:44:41,093 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-08-26 08:44:41,093 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) [2021-08-26 08:44:41,094 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) [2021-08-26 08:44:41,095 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-08-26 08:44:41,096 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) [2021-08-26 08:44:41,097 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) [2021-08-26 08:44:41,102 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) [2021-08-26 08:44:41,103 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) [2021-08-26 08:44:41,103 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-08-26 08:44:41,105 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-08-26 08:44:41,105 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 [2021-08-26 08:44:41,106 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-08-26 08:44:41,106 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-08-26 08:44:41,106 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) [2021-08-26 08:44:41,107 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) [2021-08-26 08:44:41,181 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-08-26 08:44:41,182 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-08-26 08:44:41,184 INFO L168 Benchmark]: Toolchain (without parser) took 19470.76 ms. Allocated memory was 67.1 MB in the beginning and 375.4 MB in the end (delta: 308.3 MB). Free memory was 46.3 MB in the beginning and 138.1 MB in the end (delta: -91.8 MB). Peak memory consumption was 219.0 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,184 INFO L168 Benchmark]: CDTParser took 0.20 ms. Allocated memory is still 67.1 MB. Free memory was 48.2 MB in the beginning and 48.1 MB in the end (delta: 28.9 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-08-26 08:44:41,184 INFO L168 Benchmark]: CACSL2BoogieTranslator took 344.56 ms. Allocated memory is still 67.1 MB. Free memory was 46.1 MB in the beginning and 44.3 MB in the end (delta: 1.8 MB). Peak memory consumption was 18.6 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,185 INFO L168 Benchmark]: Boogie Procedure Inliner took 71.31 ms. Allocated memory is still 67.1 MB. Free memory was 44.0 MB in the beginning and 38.3 MB in the end (delta: 5.8 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,185 INFO L168 Benchmark]: Boogie Preprocessor took 83.40 ms. Allocated memory is still 67.1 MB. Free memory was 38.1 MB in the beginning and 34.1 MB in the end (delta: 3.9 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,185 INFO L168 Benchmark]: RCFGBuilder took 1064.53 ms. Allocated memory was 67.1 MB in the beginning and 92.3 MB in the end (delta: 25.2 MB). Free memory was 33.9 MB in the beginning and 56.8 MB in the end (delta: -22.9 MB). Peak memory consumption was 22.1 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,186 INFO L168 Benchmark]: TraceAbstraction took 17743.88 ms. Allocated memory was 92.3 MB in the beginning and 375.4 MB in the end (delta: 283.1 MB). Free memory was 56.3 MB in the beginning and 158.0 MB in the end (delta: -101.7 MB). Peak memory consumption was 214.5 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,186 INFO L168 Benchmark]: Witness Printer took 157.67 ms. Allocated memory is still 375.4 MB. Free memory was 158.0 MB in the beginning and 138.1 MB in the end (delta: 19.9 MB). Peak memory consumption was 21.0 MB. Max. memory is 16.1 GB. [2021-08-26 08:44:41,187 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20 ms. Allocated memory is still 67.1 MB. Free memory was 48.2 MB in the beginning and 48.1 MB in the end (delta: 28.9 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 344.56 ms. Allocated memory is still 67.1 MB. Free memory was 46.1 MB in the beginning and 44.3 MB in the end (delta: 1.8 MB). Peak memory consumption was 18.6 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 71.31 ms. Allocated memory is still 67.1 MB. Free memory was 44.0 MB in the beginning and 38.3 MB in the end (delta: 5.8 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 83.40 ms. Allocated memory is still 67.1 MB. Free memory was 38.1 MB in the beginning and 34.1 MB in the end (delta: 3.9 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. * RCFGBuilder took 1064.53 ms. Allocated memory was 67.1 MB in the beginning and 92.3 MB in the end (delta: 25.2 MB). Free memory was 33.9 MB in the beginning and 56.8 MB in the end (delta: -22.9 MB). Peak memory consumption was 22.1 MB. Max. memory is 16.1 GB. * TraceAbstraction took 17743.88 ms. Allocated memory was 92.3 MB in the beginning and 375.4 MB in the end (delta: 283.1 MB). Free memory was 56.3 MB in the beginning and 158.0 MB in the end (delta: -101.7 MB). Peak memory consumption was 214.5 MB. Max. memory is 16.1 GB. * Witness Printer took 157.67 ms. Allocated memory is still 375.4 MB. Free memory was 158.0 MB in the beginning and 138.1 MB in the end (delta: 19.9 MB). Peak memory consumption was 21.0 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0ms ErrorAutomatonConstructionTimeTotal, 0.0ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0ms ErrorAutomatonConstructionTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 231 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 17641.7ms, OverallIterations: 17, TraceHistogramMax: 2, EmptinessCheckTime: 34.2ms, AutomataDifference: 1974.3ms, DeadEndRemovalTime: 0.0ms, HoareAnnotationTime: 13041.5ms, InitialAbstractionConstructionTime: 13.0ms, PartialOrderReductionTime: 0.0ms, HoareTripleCheckerStatistics: 2561 SDtfs, 3536 SDslu, 4283 SDs, 0 SdLazy, 646 SolverSat, 114 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 697.3ms Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 189 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 454.3ms Time, 0.0ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=416occurred in iteration=9, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0ms DumpTime, AutomataMinimizationStatistics: 373.6ms AutomataMinimizationTime, 17 MinimizatonAttempts, 2828 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.0ms HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 331 NumberOfFragments, 2618 HoareAnnotationTreeSize, 93 FomulaSimplifications, 121525933 FormulaSimplificationTreeSizeReduction, 3053.0ms HoareSimplificationTime, 93 FomulaSimplificationsInter, 19043305 FormulaSimplificationTreeSizeReductionInter, 9967.9ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 95.7ms SsaConstructionTime, 464.7ms SatisfiabilityAnalysisTime, 1049.2ms InterpolantComputationTime, 744 NumberOfCodeBlocks, 744 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 726 ConstructedInterpolants, 0 QuantifiedInterpolants, 1443 SizeOfPredicates, 3 NumberOfNonLiveVariables, 478 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 18 InterpolantComputations, 16 PerfectInterpolantSequences, 94/106 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 76]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-08-26 08:44:41,257 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...